supertassu/alpha-omega

Protect society by improving the security of open source software through direct maintainer engagement and expert analysis.

Alpha-Omega

Welcome!

Through Alpha-Omega, we aim to meaningfully improve the security of the open source software projects that we all depend so deeply upon.

Alpha will work with the maintainers of the most critical open source projects to help them identify and fix security vulnerabilities, and improve their security posture.

Omega will identify at least 10,000 widely deployed OSS projects where it can apply automated security analysis, scoring, and remediation guidance to their open source maintainer communities.

To learn more, view the Alpha-Omega home page or watch our kickoff webinar video below:

Alpha

We have active engagements with the following projects:

• Node.js
• Eclipse Foundation
• Rust Foundation
• jQuery
• Python Software Foundation

For more information on Alpha, see alpha/README.md.

Omega

Through Omega, we identify security issues in the top 10,000 (or more) most-critical open source projects. We do this through engineering and expert analysis.

We're currently hiring! If you're interested in joining our team, please see our job posting for a Security Researcher.

The Omega project is still getting started, stay tuned for more information, or learn more at omega/README.md.

Project Information

Meeting times

We usually meet on the first Wednesday of each month at 1:00pm PT. You can find the meeting invite link on the OpenSSF Community Calendar.

Governance

The CHARTER.md outlines the scope and governance of this project's activities.

Core Team

The Alpha-Omega core team members include:

• Michael Scovetta (Microsoft)
• Bob Callaway (Google)
• Yesenia Yser (Alpha-Omega)
• Jonathan Leitschuh (Alpha-Omega)
• Annapurna Veeramachaneni (Citi)
• Brian Behlendorf (OpenSSF)

We're grateful to the Linux Foundation and OpenSSF for providing additional support, including:

• David A. Wheeler
• Michelle Martineau
• Jennifer Bly
• Khahil White

Core Components

The three components and good starting points of Omega Toolchain are the following:

• Omega Analyzer
• Omega Assertion Framework
• Omega Triage Portal
• Fuzzing (PoC)

Get Involved

You can get involved by engaging with us in various ways:

• Slack: We watch the #alpha_omega Slack channel.
• Monthly Meeting: Come and talk to us directly.
• Mailing List: Join the alpha-omega-announcements mailing list to be notified of upcoming developments.
• Contact Us: Let us know you'd like to get involved.