Secure Open Source guide

Secure every stage from your keyboard to your users

Every change passes the same stages on its way to your users, from your accounts to the release, and reports of problems travel back the same way. Scan a repo to find its security gaps and what to fix first, then close each one the way teams in GitHub's Secure Open Source Fund did.

Scan your repo

Loading the guide…

Three ways to scan: public, private and the GitHub App

Security at each stage

      How to fix