GitGoat is an open source tool that was built to enable DevOps and Engineering teams to design and implement a sustainable misconfiguration prevention strategy. It can be used to test products with access to GitHub repositories without a risk to your production environment.
Turn a security or performance exposure into a reviewable decision
Maintained open-source developer cheat sheets for AI, Linux, Git, Python, Docker, Kubernetes, security, and more — plus 31 offline PDFs.
MLSecOps Practical Reference Guide, open-source AI and ML security handbook.
Secure-by-default governance bundle for GitHub Spec Kit.
WhitePact — open-source runtime authority for AI agents and autonomous systems. Intelligence may propose; WhitePact decides.
Thea Software — the engineering layer for AI, by Heartland Intel. Any chat, agent or model asks Thea which command proves a change; the build refuses what drifted.
Multi-gate open source supply chain trust validation pipeline with zero-day CVE expedited lane
Stage273: Structured Review Context — binding review records to SBOM and vulnerability scan artifacts as verifiable evidence.
Reproducible, auditable security report cards for any software project. Orchestrates the OpenSSF tool ecosystem; publishes its own score.
Stage271: External Review Linked Proof — signed, hash-linked, CI-verifiable review records on top of Stage270.
A security tool to prevent accidental installation of malicious AI-generated packages
Installable Agent Skill that turns your coding agent (Claude Code, Cursor) into a software supply-chain security engineer for your repo and CI/CD — evidence-based findings, safe verified remediation, no scanner service.
Agent skill + stdlib-only toolkit to earn OpenSSF Best Practices badges (passing tier + OSPS Baseline): gap analysis, pre-filled edit URLs, .bestpractices.json automation.
To associate your repository with the openssf topic, visit your repo's landing page and select "manage topics."