GitHub Secure Open Source Fund
$10,000 and three weeks of security training for maintainers of widely used open source projects. Applications are open on a rolling basis for every program session.
The GitHub Secure Open Source Fund pays maintainers to improve the security of their open source projects. Each selected project receives $10,000. The money is paid in parts: $6,000 during the program, $2,000 at the six month check in and $2,000 at the twelve month check in.
The core program is a three week sprint with about 15 hours of work. It includes security education, office hours with the GitHub Security Lab team, and sessions with funders and community members. The check ins at six and twelve months take about 2.5 hours each. Sessions are scheduled in Pacific time.
Applicants must be current maintainers of an open source project, as an individual or a team of at most three people. They must be at least 18 years old, have an active GitHub profile, live in a region supported by GitHub Sponsors and not work for GitHub. The project needs a clear open source license, a clear governance structure, and community traction and adoption. Maintainers must commit to security improvements.
Applications are submitted through a form linked on the program page. They are open on a rolling basis and are considered for all program sessions. Selected applicants are invited to a virtual interview. GitHub evaluates projects on how much the program and the funding can improve their security. Funders can also refer projects, and GitHub invites important and fast growing projects directly.