Hacker GitHub

← All repos

ossf/wg-securing-software-repos

View on GitHub ↗ ★ 133

OpenSSF Working Group on Securing Software Repositories

5 mentions on Hacker News by 1 person: 0 stories, 5 comments · first 2022-05-08 · latest 2025-09-16

Mentions per year 5 mentions · busiest year 2022 (4)
20082026
AllStoriesComments NewestTopOldest
  1. …Alpha-Omega program for a bunch of work across multiple ecosystems[1], including repos. [0] https://github.com/ossf/wg-securing-software-repos [1] https://alpha-omega.dev/grants/grantrecipients/
    comment by jacques_chester · 2025-09-16 · in Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised
  2. …from RubyGems, PyPI, npm and others meet regularly to discuss common problems and share ideas: https://github.com/ossf/wg-securing-software-repos
    comment by jacques_chester · 2022-10-20 · in Finding relationships between Ruby’s top packages and their dependencies
  3. …and share ideas has been super awesome. [0] https://github.com/rubygems/rfcs/pull/37 [1] https://github.com/ossf/wg-securing-software-repos
    comment by jacques_chester · 2022-07-06 · in Ruby Shield: Shopify donates $1M to stewards of rubygems, bundler
  4. …I am involved with both of these. [0] https://github.com/rubygems/rubygems.org/pull/2944 [1] https://github.com/ossf/wg-securing-software-repos
    comment by jacques_chester · 2022-06-14 · in Making popular Ruby packages more secure
  5. In particular, check out the Securing Software Repos WG: https://github.com/ossf/wg-securing-software-repos So far folks have turned up from RubyGems, PyPI, NPM, Maven Central, Gradle, Drupal and I'm probably forgotten someone.
    comment by jacques_chester · 2022-05-08 · in Unauthorized gem takeover for some gems