The OSS-SIRT SIG (Open Source Software Security Incident Response Team Special Interest Group) is a group working within the OSSF's Vulnerability Disclosure Working Group that is focused on creating secure vulnerability management capabilities within the open source ecosystem to ensure effective coordinated vulnerability disclosure practices (CVD)

Official GitHub Action for OpenSSF Scorecard.

Open Source Vulnerability schema.

Official GitHub Action for OpenSSF Scorecard.

OpenSSF Scorecard - Security health metrics for Open Source

Minimizing rework for governance activities.