All registries
Industry consortium

OpenSSF Best Practices & Scorecards

OpenSSF

Security & cryptoCloud & APIs
WHY YOU NEED THIS

SLSA provenance levels and OpenSSF Scorecards are the practical OSS security maturity frameworks — under Linux Foundation.

What It Is

Open Source Security Foundation: Scorecards, SLSA supply-chain levels, Sigstore, GUAC, and security baseline guides for open-source maintainers.

Taxonomy

By project: Scorecards · SLSA · Sigstore · Best Practices Badge · Working groups

Top-Level Categories

OpenSSF ScorecardsSLSASigstoreBest Practices BadgeAlpha-Omega

Master Catalog

Sub-Indexes & Guides

Related Registry Sources

openssfslsasigstorescorecardssupply-chain