Source
What 50 open source projects taught us about security in the AI era
The GitHub Secure Open Source Fund's Session 4 provided over $500,000 to 50 open source projects to improve security in the AI era. The program paired maintainers with GitHub Security Lab experts and tools to enhance vulnerability response.
Why it matters
Improving the security of widely used open source software creates a more resilient ecosystem for the developers and organizations that depend on these components.
The details
- Participating projects received $10,000 USD each via GitHub Sponsors based on outcomes.
- AI tools assisted with vulnerability triage and remediation while maintainers provided judgement.
- The program covered diverse sectors including AI systems, core languages, and networking infrastructure.
Show entities and relationshipsHide entities and relationships
In this article
Products
Topics
Organizations
Technologies
Key connections
GitHub owns GitHub Sponsors
GitHub Sponsors is GitHub's financial support platform for open source maintainers.
GitHub funds Secure Open Source Fund
GitHub created and funded the Secure Open Source Fund to support open source security.
GitHub Security Lab leads Secure Open Source Fund
GitHub Security Lab designs and curates the sprint training and security office hours for the fund.
Secure Open Source Fund uses GitHub Sponsors
The Secure Open Source Fund distributes project funding via GitHub Sponsors.
Secure Open Source Fund uses Azure
The Secure Open Source Fund provides Azure cloud credits to participating projects.
OpenClaw uses GitHub Actions
OpenClaw audited its GitHub Actions workflows during Session 4.
Show 52 more connectionsShow fewer connections
OpenClaw uses GitHub Copilot
Projects explored using GitHub Copilot for vulnerability triage and remediation.
FastAPI participated in Session 4 of the GitHub Secure Open Source Fund.
Caracal is a member of Secure Open Source Fund
Caracal participated in Session 4 of the Secure Open Source Fund.
Deep Agents is a member of Secure Open Source Fund
Deep Agents participated in Session 4 of the Secure Open Source Fund.
DocsGPT is a member of Secure Open Source Fund
DocsGPT participated in Session 4 of the Secure Open Source Fund.
LadybugDB is a member of Secure Open Source Fund
LadybugDB participated in Session 4 of the Secure Open Source Fund.
LangChain is a member of Secure Open Source Fund
LangChain participated in Session 4 of the Secure Open Source Fund.
n8n-MCP is a member of Secure Open Source Fund
n8n-MCP participated in Session 4 of the Secure Open Source Fund.
Nasiko is a member of Secure Open Source Fund
Nasiko participated in Session 4 of the Secure Open Source Fund.
ONNX is a member of Secure Open Source Fund
ONNX participated in Session 4 of the Secure Open Source Fund.
OpenClaw is a member of Secure Open Source Fund
OpenClaw participated in Session 4 of the Secure Open Source Fund.
PageIndex is a member of Secure Open Source Fund
PageIndex participated in Session 4 of the Secure Open Source Fund.
Scenic is a member of Secure Open Source Fund
Scenic participated in Session 4 of the Secure Open Source Fund.
Serena is a member of Secure Open Source Fund
Serena participated in Session 4 of the Secure Open Source Fund.
browserslist is a member of Secure Open Source Fund
browserslist participated in Session 4 of the Secure Open Source Fund.
CycloneDX Python Library is a member of Secure Open Source Fund
CycloneDX Python Library participated in Session 4 of the Secure Open Source Fund.
Cucumber is a member of Secure Open Source Fund
Cucumber participated in Session 4 of the Secure Open Source Fund.
golangci-lint is a member of Secure Open Source Fund
golangci-lint participated in Session 4 of the Secure Open Source Fund.
JReleaser is a member of Secure Open Source Fund
JReleaser participated in Session 4 of the Secure Open Source Fund.
postcss is a member of Secure Open Source Fund
postcss participated in Session 4 of the Secure Open Source Fund.
Task is a member of Secure Open Source Fund
Task participated in Session 4 of the Secure Open Source Fund.
Byte Buddy is a member of Secure Open Source Fund
Byte Buddy participated in Session 4 of the Secure Open Source Fund.
core-js is a member of Secure Open Source Fund
core-js participated in Session 4 of the Secure Open Source Fund.
FS2 is a member of Secure Open Source Fund
FS2 participated in Session 4 of the Secure Open Source Fund.
Gleam is a member of Secure Open Source Fund
Gleam participated in Session 4 of the Secure Open Source Fund.
htmx is a member of Secure Open Source Fund
htmx participated in Session 4 of the Secure Open Source Fund.
Pkl is a member of Secure Open Source Fund
Pkl participated in Session 4 of the Secure Open Source Fund.
Pyodide is a member of Secure Open Source Fund
Pyodide participated in Session 4 of the Secure Open Source Fund.
termcolor is a member of Secure Open Source Fund
termcolor participated in Session 4 of the Secure Open Source Fund.
cheerio is a member of Secure Open Source Fund
cheerio participated in Session 4 of the Secure Open Source Fund.
Ciphey is a member of Secure Open Source Fund
Ciphey participated in Session 4 of the Secure Open Source Fund.
CodeRunner is a member of Secure Open Source Fund
CodeRunner participated in Session 4 of the Secure Open Source Fund.
Hoppscotch is a member of Secure Open Source Fund
Hoppscotch participated in Session 4 of the Secure Open Source Fund.
MapStruct is a member of Secure Open Source Fund
MapStruct participated in Session 4 of the Secure Open Source Fund.
Python Pillow is a member of Secure Open Source Fund
Python Pillow participated in Session 4 of the Secure Open Source Fund.
Proyecto Respira is a member of Secure Open Source Fund
Proyecto Respira participated in Session 4 of the Secure Open Source Fund.
Readest is a member of Secure Open Source Fund
Readest participated in Session 4 of the Secure Open Source Fund.
ToolJet is a member of Secure Open Source Fund
ToolJet participated in Session 4 of the Secure Open Source Fund.
Vuetify is a member of Secure Open Source Fund
Vuetify participated in Session 4 of the Secure Open Source Fund.
Yjs is a member of Secure Open Source Fund
Yjs participated in Session 4 of the Secure Open Source Fund.
actix-web is a member of Secure Open Source Fund
actix-web participated in Session 4 of the Secure Open Source Fund.
aiohttp is a member of Secure Open Source Fund
aiohttp participated in Session 4 of the Secure Open Source Fund.
Apache Solr is a member of Secure Open Source Fund
Apache Solr participated in Session 4 of the Secure Open Source Fund.
Apache ZooKeeper is a member of Secure Open Source Fund
Apache ZooKeeper participated in Session 4 of the Secure Open Source Fund.
etcd is a member of Secure Open Source Fund
etcd participated in Session 4 of the Secure Open Source Fund.
FastAPI is a member of Secure Open Source Fund
FastAPI participated in Session 4 of the Secure Open Source Fund.
Haraka is a member of Secure Open Source Fund
Haraka participated in Session 4 of the Secure Open Source Fund.
Hummingbird is a member of Secure Open Source Fund
Hummingbird participated in Session 4 of the Secure Open Source Fund.
mimetype is a member of Secure Open Source Fund
mimetype participated in Session 4 of the Secure Open Source Fund.
Sniffnet is a member of Secure Open Source Fund
Sniffnet participated in Session 4 of the Secure Open Source Fund.
Starlette is a member of Secure Open Source Fund
Starlette participated in Session 4 of the Secure Open Source Fund.
UAParser.js is a member of Secure Open Source Fund
UAParser.js participated in Session 4 of the Secure Open Source Fund.
Related events
GitHub Secure Open Source Fund Completes Session 4 Investing Over $500,000 Across 50 Projects
Get the weekly recap
The stories like this one, picked and explained — once a week, straight to your inbox.