ossf / wg-vulnerability-disclosures

The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by helping mature and advocate well-managed vulnerability reporting and communication.

https://openssf.org

ossf/wg-vulnerability-disclosures Issues

Resources to help protect developers (humans) from attacks similar to the xz backdoor compromise
Updated a month ago7
Create TAC PR to document Vuln Disc WG in TI Lifecycle levels - Vuln Disc = Graduated
Closed 2 months ago1
[RFC] Becoming and Operating a CNA as an Open Source Org/Project
Closed 3 months ago6
MVSR for Vuln Disclosure WG
Closed 5 months ago2
Security Emergency/Crisis Response resources (team, guide, etc)
Updated 6 months ago1
Project Idea - OSSF Official Outgoing Vulnerability Disclosure Policy
Updated 6 months ago21
Project Idea - OpenSSF Inbound Vulnerability Reporting Policy
Updated 6 months ago13
Simple Vulnerability Intake Form for OSS Projects
Updated 7 months ago5
Project Idea - CVD Guide for OSS Consumers
Updated 9 months ago3
NVD database resources and distribution
Updated a year ago6
SIG: Automated Vulnerability Fixing
Updated a year ago12
Specification: OpenSSF Compliant Automated Vulnerability Fix Campaign
Updated a year ago1
VOTE - Adopt OpenVEX as project within the OpenSSF under Vuln Disclosure Working Group (WG)
Closed a year ago148
VOTE - Creation of APAC-friendlier time for WG call
Closed a year ago5
Project Idea - Marketing & Social Media Initiative CVD Condensing Guide Info
Updated a year ago
Project Idea - create plugins and/or other tooling to enable CVD Guides
Updated a year ago7
Project idea: guide for maintainers on handling incidents
Updated a year ago6
Simple OSS Project Security Policy
Updated a year ago11
WG Charter updates
Closed a year ago5
VOTE - Adopt WG Charter
Closed a year ago6
Project Tracking: figure out how we want to track progress across all of the WG/SIG work
Updated 2 years ago3
Generate skeleton templates for security advisories and vuln reports
Closed 2 years ago
Vulnerability disclosure research
Closed 2 years ago5
Embed CPE names into binaries
Updated 2 years ago15
Submit outreach talk to FOSS Backstage 2022
Closed 3 years ago1
Develop Coordinated Vulnerability Disclosure recommendations for OSS projects
Closed 3 years ago1
Document OSS vulnerability disclosure pain points
Closed 3 years ago5
List of vulnerability disclosure standards
Updated 3 years ago16
Vulnerability disclosures WG meeting 02/08/2021
Closed 3 years ago1
Vulnerability disclosures WG meeting 02/22/2021
Closed 3 years ago1
Motivation behind new security advisory schema standard in this repo
Closed 4 years ago16
OSS vulnerability disclosure white paper
Updated 3 years ago14
Vulnerability disclosures WG meeting 01/11/2021
Closed 3 years ago1
Document OSS vulnerability disclosure processes
Updated 3 years ago1
Should we skip the December 28 meeting?
Closed 3 years ago5
Verification of Findings - Reducing the number of false positives for vulns that open source projects receive
Closed 3 years ago5
Vulnerability disclosures WG meeting 12/14/2020
Closed 3 years ago
Vulnerability disclosures WG meeting 11/30/2020
Closed 3 years ago
Vulnerability querying service
Updated 3 years ago6
Volunteer to mentor FOSS project on Vulnerability Disclosures
Closed 3 years ago3
Vulnerability disclosures WG meeting 11/16/2020
Closed 4 years ago6
Common scoring system for vulnerability test coverage?
Updated 4 years ago2
Vulnerability disclosures WG meeting 10/5/2020
Closed 4 years ago11
Prepare slide deck for the OpenSSF Town Hall (November 9, 2020)
Closed 4 years ago2
New WG meeting time
Closed 4 years ago2
Vulnerability disclosures WG meeting 10/26/2020
Closed 4 years ago
Introduction - Matt Wilson (GitLab)
Closed 4 years ago2
Introduction - Martin Prpič (Red Hat)
Closed 4 years ago1
update description field in .github/settings.yml
Closed 4 years ago1
Vulnerability disclosures WG meeting 10/05/2020
Closed 4 years ago