Org profile: sourced & linked
Organization Profile
GitHub
aka GitHub Secure Open Source Fund, GitHub Sponsors, github secure open source
GitHub (Microsoft) operates multiple open-source funding channels: GitHub Sponsors for recurring support to maintainers, the GitHub Accelerator (equity-free support for OSS teams to work full-time), the GitHub Fund (VC investments in OSS companies via M12), and the Secure Open Source Fund, which pairs $10,000 per-project funding with security education and expert support for maintainers of critical projects. These programs have distributed over $130M and continue expanding, with Secure Open Source Fund sessions running into 2025/2026.1,2,3,4
Programs
1 program on fileJanFebMarAprMayJunJulAugSepOctNovDec◆ Today
No dates on file
Awards
137 on fileShowing 51-75 of 137, newest dated evidence first
RecipientProgramAmountDateEvidence
- jsoupProgramSession 3Amount$10,000 USDDate–
- JUnitProgramSessions 1 and 2Amount$10,000 USDDate–
- JupyterProgramSessions 1 and 2Amount$10,000 USDDate–
- Jupyter Docker StacksProgramSession 3Amount$10,000 USDDate–
- KeycloakProgramSession 3Amount$10,000 USDDate–
- KeyshadeProgramSession 3Amount$10,000 USDDate–
- kgatewayProgramSession 3Amount$10,000 USDDate–
- LibytProgramSessions 1 and 2Amount$10,000 USDDate–
- LLVMProgramSession 3Amount$10,000 USDDate–
- Log4jProgramSessions 1 and 2Amount$10,000 USDDate–
- LORISProgramSessions 1 and 2Amount$10,000 USDDate–
- MastodonProgramSession 3Amount$10,000 USDDate–
- MathesarProgramSessions 1 and 2Amount$10,000 USDDate–
- MatplotlibProgramSessions 1 and 2Amount$10,000 USDDate–
- MauticProgramSessions 1 and 2Amount$10,000 USDDate–
- MermaidProgramSession 3Amount$10,000 USDDate–
- MessageFormatProgramSessions 1 and 2Amount$10,000 USDDate–
- MockoonProgramSession 3Amount$10,000 USDDate–
- NativeScriptProgramSessions 1 and 2Amount$10,000 USDDate–
- NetbirdProgramSessions 1 and 2Amount$10,000 USDDate–
- NettyProgramSession 3Amount$10,000 USDDate–
- Next.jsProgramSessions 1 and 2Amount$10,000 USDDate–
- NixOS/NixpkgsProgramSessions 1 and 2Amount$10,000 USDDate–
- node-lru-cacheProgramSession 3Amount$10,000 USDDate–
- Node.jsProgramSessions 1 and 2Amount$10,000 USDDate–
1
Programs
137
Awards
137
Grantees
$1.4M
Known USD
0
Live rounds
no open or announced rounds on file
Active
Status
Focus Areas
open source security, software supply chain, maintainer security education, critical dependencies, vulnerability reduction, secure development practices.
Typical size$10,000 per project ($6,000 during the program, $2,000 at the 6-month check-in, $2,000 at the 12-month check-in)
CadenceMulti-week sessions/cohorts (a 3-week security education program); applications accepted on a rolling basis, with applicants considered for upcoming sessions without reapplying.
Sources
- github.com/open-source
- resources.github.com/github-secure-open-source-fund
- github.blog/open-source/maintainers/securing-the-supply-chain-at-scale-starting-with-71-important-open-source-projects
- github.blog/open-source/maintainers/securing-the-ai-software-supply-chain-security-results-across-67-open-source-projects