GitHub Secure Open Source Fund

Who can apply

• real users
• a clear open source license on the repo

What the form asks

• Email Address: your email
• First name: your first name
• Last name: your last name
• City: your city
• State or Province: your state or province
• Country: your country
• What is your GitHub Handle? (e.g. @mona): your GitHub handle
• What is your project? Please include the functionality the project provides and the type of project (application or library).: what the project does and its type
• What is the repository URL? (e.g. www.github.com/mona): the repository URL
• What is the license for this project?: the project license
• How large is the core team?: the core team size
• Selected projects can have up to 2 maintainers participate in the program. Are there other maintainers or contributors to this project who want to join the GitHub Secure Open Source Fund and Program with you? What are their GitHub handles?: optional
• Are you, or others, working in open source full-time on this project?: whether anyone works on it full-time
• Are you signed up for GitHub Sponsors?: whether you use GitHub Sponsors
• Does your project have a Security Lead or Committee?: whether there is a security lead
• Have you or the core team participated in any security training? If so, please describe.: any security training
• What is the level of general security understanding for the applying project?: your general security level
• What is the level of AI security understanding for the applying project?: your AI security level
• If accepted into the program, which area of security are you most interested in exploring further?: the security area you want to explore
• What would be the external impact if this project had a security issue? Please describe.: impact of a security issue
• What in your opinion would be the positive impact of security improvements of your project on the broader ecosystem?: ecosystem impact of better security
• Has your project had any reported security issues (CVEs, other security vulnerabilities)? Please share.: past reported security issues
• Do you have an existing sponsorship or funding strategy?: your funding strategy
• Do you self-identify as an underrepresented person in tech? Please share.: whether you are underrepresented
• Were you referred by an organization or individual? If so, can you provide their name or the organization's name?: optional
• Please enter any URLs of websites or social media accounts associated with your project (if applicable).: optional
• What is your role in the project?: your role in the project
• How much funding have you received to date?: funding received to date
• How will the funding help you and your project achieve better security outcomes?: how funding improves security
• Application Type: the application type
• If Referred Application: Please provide the name of the organization, project, or individual that referred you any relevant details about your connection or how you were referred.: referral details or N/A
• Do you have an open source project you would like to nominate for the GitHub Secure Open Source Fund? If so, please provide the project name and its GitHub repository URL.: optional
• If you have a personal LinkedIn profile, what is the URL?: optional
• If you have a personal X (formerly Twitter) profile, what is the URL?: optional
• By checking this box you agree that you must:: agree to the eligibility terms

Rules

• Rolling: applications are open on a rolling basis and are considered for all program sessions.
• For current maintainers of an open source project: individuals, or teams of up to 2 people per project.
• You must be 18 or older, have an active GitHub profile, live in a region supported by GitHub Sponsors, and not be a GitHub employee or contractor.
• The project needs a clear open source license, demonstrated community traction and adoption, and a clear governance structure before kick-off.
• Core leaders must commit to the required programming and be willing to engage in and improve security.
• Selected participants commit 15 hours over a 3-week period, plus 2.5 hours at each of the 6-month and 12-month check-ins; meetings are scheduled in Pacific time.
• Funding is paid in tranches: $6,000 during the program, $2,000 at the 6-month check-in and $2,000 at the 12-month check-in.
• Selected applicants have a virtual interview to determine next steps.

What they want now

GitHub Secure Open Source Fund wants Security of open source projects, AI security understanding for maintainers