Projects

Open source projects I maintain, grouped by ecosystem.

OpenSSF Security & Compliance

Gemara defines the model, Privateer evaluates it, and Security Insights describes the project.

Gemara github.com/gemaraproj

gemaraproj/gemara Minimizing rework for governance activities. Go gemaraproj/go-gemara Go SDK for parsing Gemara documents. Go The rest of the gemaraproj org →

Privateer github.com/privateerproj

ossf/pvtr-github-repo-scanner Privateer plugin for scanning the security hygiene of a GitHub repository. Go privateerproj/privateer-sdk SDK that streamlines the creation of Privateer plugins. Go privateerproj/pvtr Plugin-based framework for security and compliance evaluations. Go

Security Insights & OSPS Baseline

ossf/security-insights Machine-readable specification for the attestation of security-relevant data. CUE revanite-io/osps-baseline-action GitHub Action for running OSPS Baseline security assessments. Shell revanite-io/security-insights-action GitHub Action that validates a repository's security-insights.yml against the official OpenSSF Security Insights CUE schema. CUE

Argo

argoproj/argo-helm ArgoProj Helm Charts. Helm

GitHub OSPO Tooling

GitHub Actions for open source program offices (OSPOs) to measure and maintain their orgs.

github-community-projects/cleanowners GitHub Action to suggest removal of non-organization members from CODEOWNERS files. Python github-community-projects/contributors GitHub Action that, given an organization or repository, produces information about the contributors over the specified time period. Python github-community-projects/evergreen GitHub Action to enable automated security updates and open an issue/PR in repos in an org that have dependency files but no dependabot.yaml file. Python github-community-projects/issue-metrics Gather metrics on issues/PRs/discussions such as time to first response, count of issues opened, closed, etc. Python github-community-projects/measure-innersource Measure InnerSource collaboration in a repository. Python github-community-projects/ospo-reusable-workflows Centralized reusable GitHub Actions workflows. Shell github-community-projects/stale-repos Find stale repositories in a GitHub organization. Python

Archived Projects that I formerly maintained Link to heading

Fun Websites (all safe for work) Link to heading

  1. Some of the above websites are inside jokes and are meant to cause humor for those who understand the context. Not meant to actually insult anyone. ↩︎ ↩︎ ↩︎ ↩︎ ↩︎

  2. Change the size of your screen to see the background change. A little CSS fun ↩︎