Org profile: sourced & linked
Organization Profile
GitHub
aka GitHub Secure Open Source Fund, GitHub Sponsors, github secure open source
GitHub (Microsoft) operates multiple open-source funding channels: GitHub Sponsors for recurring support to maintainers, the GitHub Accelerator (equity-free support for OSS teams to work full-time), the GitHub Fund (VC investments in OSS companies via M12), and the Secure Open Source Fund, which pairs $10,000 per-project funding with security education and expert support for maintainers of critical projects. These programs have distributed over $130M and continue expanding, with Secure Open Source Fund sessions running into 2025/2026.1,2,3,4
Programs
1 program on fileJanFebMarAprMayJunJulAugSepOctNovDec◆ Today
No dates on file
Awards
137 on fileShowing 51-75 of 137, newest dated evidence first
RecipientProgramAmountDateEvidence
- jsoupProgramSession 3Amount$10,000 USDDate–
- JUnitProgramSessions 1 and 2Amount$10,000 USDDate–
- JupyterProgramSessions 1 and 2Amount$10,000 USDDate–
- Jupyter Docker StacksProgramSession 3Amount$10,000 USDDate–
- KeycloakProgramSession 3Amount$10,000 USDDate–
- KeyshadeProgramSession 3Amount$10,000 USDDate–
- kgatewayProgramSession 3Amount$10,000 USDDate–
- LibytProgramSessions 1 and 2Amount$10,000 USDDate–
- LLVMProgramSession 3Amount$10,000 USDDate–
- Log4jProgramSessions 1 and 2Amount$10,000 USDDate–
- LORISProgramSessions 1 and 2Amount$10,000 USDDate–
- MastodonProgramSession 3Amount$10,000 USDDate–
- MathesarProgramSessions 1 and 2Amount$10,000 USDDate–
- MatplotlibProgramSessions 1 and 2Amount$10,000 USDDate–
- MauticProgramSessions 1 and 2Amount$10,000 USDDate–
- MermaidProgramSession 3Amount$10,000 USDDate–
- MessageFormatProgramSessions 1 and 2Amount$10,000 USDDate–
- MockoonProgramSession 3Amount$10,000 USDDate–
- NativeScriptProgramSessions 1 and 2Amount$10,000 USDDate–
- NetbirdProgramSessions 1 and 2Amount$10,000 USDDate–
- NettyProgramSession 3Amount$10,000 USDDate–
- Next.jsProgramSessions 1 and 2Amount$10,000 USDDate–
- NixOS/NixpkgsProgramSessions 1 and 2Amount$10,000 USDDate–
- node-lru-cacheProgramSession 3Amount$10,000 USDDate–
- Node.jsProgramSessions 1 and 2Amount$10,000 USDDate–
1
Programs
137
Awards
137
Grantees
$1.4M
Known USD
0
Current rounds
1
Active programs
Active
Status
Focus Areas
open source security, software supply chain, maintainer security education, critical dependencies, vulnerability reduction, secure development practices.
Typical size$10,000 per project ($6,000 during the program, $2,000 at the 6-month check-in, $2,000 at the 12-month check-in)
CadenceMulti-week sessions/cohorts (a 3-week security education program); applications accepted on a rolling basis, with applicants considered for upcoming sessions without reapplying.
Sources
- github.com/open-source
- resources.github.com/github-secure-open-source-fund
- github.blog/open-source/maintainers/securing-the-supply-chain-at-scale-starting-with-71-important-open-source-projects
- github.blog/open-source/maintainers/securing-the-ai-software-supply-chain-security-results-across-67-open-source-projects