Thomas Dohmke’s Post

This is a great step forward to help advance the security of Open Source in the software supply chain-- essential to securing the digital ecosystem.

Open source maintainers can already take advantage of GitHub's security features like Copilot Autofix and secret scanning for free. However, we know securing the software ecosystem is a team effort - and tooling alone is not the answer. GitHub continues to invest in additional programming, training, and infrastructure that empowers the open source community. Through GitHub's Secure Open Source Fund, we look to improve the sustainability and security of open source projects, leading to improved security outcomes for projects and enterprises alike.

Five years ago, with the launch of GitHub Sponsors, I took a small step by sponsoring Home Assistant – my very first contribution through Sponsors. And as it turns out, I wasn’t alone – and my contribution wasn’t too small to make a difference. Every investment matters when individuals, developers, and organizations come together around a shared opportunity. Now, with the GitHub Secure Open Source Fund, we’re embracing that same philosophy, starting with a single problem, combining our investments, and scaling solutions for the community. Securing open source is a journey that takes all of us – and we won’t stop finding ways to give maintainers the tools they need to succeed. This isn’t just a step forward for GitHub – it’s a giant leap toward a more secure, resilient open source ecosystem for us all. 🌍

GitHub's COO, Kyle Daigle on the company's latest GitHub Secure Open Source fund, investing $1.5M in capital for projects that promote security across the software ecosystem alongside partners like American Express, 1Password, Shopify, and Stripe. Daigle shares with Paul S. in TechCrunch: "We’re the home of open source, ultimately, and we have an obligation to help ensure that open source can continue to thrive and have the support that it needs."

The GitHub Secure Open Source Fund, part of its Accelerator programme, is providing $1.25M in funding to 125 projects, backed through the support of American ...

CXOToday covered GitHub Secure Open Source Fund launch this week! India has the fastest-growing developer population, and open source is a big factor of this. 🚀 We are excited to announce the GitHub Secure Open Source Fund. This initiative is backed with +$1.25MM in funding from partners focused on enhancing the security of open source software. https://lnkd.in/ggka5TbW ✨ We are proud to have the support of Alfred P. Sloan Foundation, American Express, Chainguard, HeroDevs, Kraken, Mayfield Fund, Microsoft, 1Password, Shopify, Stripe, Superbloom, Vercel, Zerodha, and others. We will continue to accept partners towards funding open source security. Check it out!

The Microsoft-owned platform is now accepting applications for the GitHub Secure Open Source Fund, which launches with $1.25 million to be invested in 125 projects, and will leave applications open until January 7, 2025. https://lnkd.in/g6D_tgVG

I don't think there is an argument about whether GitHub is the place for open source. Overwhelmingly, most new projects choose GitHub, and looking back in 2023, the biggest projects with the highest star growth (the current metric for success) can be attributed to these large star events to intentional marketing. There was a time when weekend code sessions drove open source, but today, open source is fueled by sustainable sponsorship conversations and venture capital. This is not entirely bad; it provides a sustainable future for the biggest projects we use and love. The challenge in this new reality is defining what is worth looking at and whether GitHub Stars are still relevant for discovering projects worth your time. Correlating the best metric to identify projects to invest your time in depends on who has the biggest reach in a community. This seems contrary to how open source started and marks a shift in how we think about success in open source moving forward. My question is, as this seems to change for different projects, What is success for open source in 2024? #github #opensource #chaoss

“GitHub has launched a $1.25 million fund to be invested in improving the security of 125 open source projects.” https://lnkd.in/eUfemFry

😅 Today I saw a post chiding us what the GitHub contributor graph _should_ look like. WEEKENDS ARE A MUST. CONSISTENCY IS KEY. 🤣 Yesterday I saw a post that said open source MUST be elitist in order for it to succeed. They falsely equivocated open governance with democracy. 🤐 These takes are rubbish. I almost quoted them here, but I'd rather lift up an alternative narrative. 🛑 We need to dispel the myth that open source software is this difficult, herculean marathon. That's not going to move the needle on the next generation. It's not going to shame the enterprise developer to make that first PR. It's not going to convince anyone to change. 🚧 Open source can be approachable. It can be work. Just work. 9 to 5. The cover of this book alludes to this. I wrote about it at https://lnkd.in/gUcJkvpM. The spectrum of engagement, the truest array of activities one can explore to advance a project, is a vast space welcome to everyone. - Maintainers that optimize for modest moments of contribution will find the most success. - Employers that empower their workers to engage upstream unlock ridiculous potential energy - Individuals that find outlets like the above hone their craft and do so without guilt. 🎃 To these ends, I also acknowledge it's October, the traditional Hacktoberfest festival is upon us. I feel fortunate that Approachable Open Source is entering the discourse right now, so I can help pivot this discussion, if only a tiny bit. 📦 I want to get it into your hands. I'm taking $10 off the paperback / digital bundle, now until the end of October. This is getting close to an at-cost deal here. 📭 Buy today at https://lnkd.in/gNPUEVDB PS - this will be the end of my book launch phase. Every sale now also means we'll be sending money to charity! #opensource #hacktoberfest #book #spectrumofengagement #github #payitforward