GitHub on Tuesday announced a new effort to improve the security and sustainability of open source projects through funding, training, certification and more.
See also: GitHub CLI RCE vulnerability allows execution of malicious commands
The Microsoft -owned platform is now accepting applications for its GitHub Secure Open Source Fund , which starts with $1.25 million to invest in 125 projects and will leave applications open until January 7, 2025 .
The purpose of the fund, GitHub says, is to build a community of securitywho share common goals and who will lead to improved security in the open source ecosystem.
As part of the program, project maintainers will receive financial support, safety training, certification, mentoring, tools, promotion, and biannual safety health reports.
See also: Vulnerability in GitHub Enterprise allows Authentication Bypass
Maintainers will receive $10,000 in funding per project, directly through GitHub sponsors, and will be provided with a 5-10 hour commitment per week (including workshops, group sessions, mentoring, and project work), time with the GitHub Security Lab, access to experts , and community engagement.
Additionally, GitHub will offer free access and training for related products, including Copilot, Copilot Autofix , and Secret Scanning, access to the new GitHub Secure Open Source community, and opportunities for networking and support.
The GitHub Secure Open Source Fund is launching with support from over a dozen organizations, but GitHub says it will continue to accept partners interested in funding open source.
See also: Malicious npm packages compromise Roblox systems
Open source projects are a cornerstone of innovation in today’s technology landscape. They allow developers from around the world to collaborate and contribute to improving software. By openly sharing source code, these projects foster transparency and trust, inviting diverse perspectives and ideas. This collaborative model not only accelerates technological advances, but also democratizes access to high-quality software, making powerful tools available to individuals and organizations regardless of their resources. Open source projects have been crucial to the development of important software applications and platforms that are integral to the functioning of the Internet and modern digital ecosystems.
Source: securityweek
