Repository Security

This collection of projects is for and focuses on the maintainers of software repositories, software registries, and tools which rely on them, at various levels including system, language, plugin, extensions and container systems.

The Securing Software Repositories Working Group provides a collaborative environment for aligning on the introduction of new tools and technologies to strengthen and secure software repositories.

Projects

gittuf

Protect the contents of a Git repository from unauthorized or malicious changes.

Learn More

Minder

Proactively manage security posture by providing a set of checks and policies.

Learn More

OpenBao

Manage, store, and distribute sensitive data including secrets, certificates, and keys

Learn More

Repository Service for TUF

Securing content downloads from tampering between repository and client.

Learn More

The Supply Chain Integrity and Security Tooling working groups also support some of the projects in this category.

Projects

gittuf

Minder

OpenBao

Repository Service for TUF

We envision a future where OSS is universally trusted, secure, and reliable. Join us in making open source more secure.

Get the latest announcements, event info, and the community news in your inbox