Org profile: sourced & linked
Organization Profile
GitHub
aka GitHub Secure Open Source Fund, GitHub Sponsors, github secure open source
GitHub (Microsoft) operates multiple open-source funding channels: GitHub Sponsors for recurring support to maintainers, the GitHub Accelerator (equity-free support for OSS teams to work full-time), the GitHub Fund (VC investments in OSS companies via M12), and the Secure Open Source Fund, which pairs $10,000 per-project funding with security education and expert support for maintainers of critical projects. These programs have distributed over $130M and continue expanding, with Secure Open Source Fund sessions running into 2025/2026.1,2,3,4
Programs
1 program on fileJanFebMarAprMayJunJulAugSepOctNovDec◆ Today
No dates on file
Awards
137 on fileShowing 26-50 of 137, newest dated evidence first
RecipientProgramAmountDateEvidence
- CSS-Declaration-SorterProgramSessions 1 and 2Amount$10,000 USDDate–
- curlProgramSession 3Amount$10,000 USDDate–
- CycloneDX (cdxgen)ProgramSessions 1 and 2Amount$10,000 USDDate–
- Cyclonedx-dotnetProgramSessions 1 and 2Amount$10,000 USDDate–
- DataJourneyProgramSessions 1 and 2Amount$10,000 USDDate–
- DieselProgramSessions 1 and 2Amount$10,000 USDDate–
- DIGITProgramSession 3Amount$10,000 USDDate–
- ElectronProgramSessions 1 and 2Amount$10,000 USDDate–
- EnteProgramSessions 1 and 2Amount$10,000 USDDate–
- ERPNextProgramSessions 1 and 2Amount$10,000 USDDate–
- evccProgramSession 3Amount$10,000 USDDate–
- ExpressProgramSessions 1 and 2Amount$10,000 USDDate–
- external-secretsProgramSession 3Amount$10,000 USDDate–
- fabric.jsProgramSession 3Amount$10,000 USDDate–
- FastifyProgramSessions 1 and 2Amount$10,000 USDDate–
- FluxProgramSessions 1 and 2Amount$10,000 USDDate–
- FoundryProgramSession 3Amount$10,000 USDDate–
- GitoxideProgramSession 3Amount$10,000 USDDate–
- GoReleaserProgramSession 3Amount$10,000 USDDate–
- Helmet.jsProgramSession 3Amount$10,000 USDDate–
- HimmelblauProgramSession 3Amount$10,000 USDDate–
- ImageMagickProgramSession 3Amount$10,000 USDDate–
- JenkinsProgramSession 3Amount$10,000 USDDate–
- JoseProgramSessions 1 and 2Amount$10,000 USDDate–
- jQueryProgramSession 3Amount$10,000 USDDate–
1
Programs
137
Awards
137
Grantees
$1.4M
Known USD
0
Current rounds
1
Active programs
Active
Status
Focus Areas
open source security, software supply chain, maintainer security education, critical dependencies, vulnerability reduction, secure development practices.
Typical size$10,000 per project ($6,000 during the program, $2,000 at the 6-month check-in, $2,000 at the 12-month check-in)
CadenceMulti-week sessions/cohorts (a 3-week security education program); applications accepted on a rolling basis, with applicants considered for upcoming sessions without reapplying.
Sources
- github.com/open-source
- resources.github.com/github-secure-open-source-fund
- github.blog/open-source/maintainers/securing-the-supply-chain-at-scale-starting-with-71-important-open-source-projects
- github.blog/open-source/maintainers/securing-the-ai-software-supply-chain-security-results-across-67-open-source-projects