Scaling Security: Inside the GitHub Securing Open Source Software Fund

What's in the SOSS? An OpenSSF Podcast

In this episode of What’s in the SOSS?, CRob sits down with Kevin Crosby and Xavier Rene-Corail from GitHub to unpack the GitHub Secure Open Source Fund - an innovative program that combines funding, education, and community to strengthen open source security. Learn how this unique initiative connects maintainers with training, resources, and a $10K stipend to scale security best practices. The trio also shares the origins of the fund, surprising takeaways from the first cohort, and what’s next for this rapidly growing initiative.
Chapters:
00:00 – Introduction
00:58 – Meet the Guests
02:26 – Open Source Origin Stories
06:10 – The Spark Behind the SOS Fund
10:19 – What Participating in the Fund Looks Like
12:39 – Inside the Curriculum
14:50 – Unique Program Design & Outcomes
16:23 – Key Learnings from the First Cohort
19:09 – Feedback & Areas to Improve
21:50 – What’s Next for the Fund
23:00 – Rapid Fire Round
24:23 – Call to Action

Episode links:

• Kevin Crosby LinkedIn
• Xavier René-Corail LinkedIn
• GitHub Secure Open Source Fund
• May is Maintainer Month with the theme of Securing Open Source
• Get involved with the OpenSSF
• Subscribe to the OpenSSF newsletter
• Follow the OpenSSF on LinkedIn

Chapters

1. Scaling Security: Inside the GitHub Securing Open Source Software Fund (00:00:00)

2. Meet the Guests (00:00:58)

3. Open Source Origin Stories (00:02:26)

4. The Spark Behind the SOS Fund (00:06:10)

5. What Participating in the Fund Looks Like (00:10:19)

6. Inside the Curriculum (00:12:39)

7. Unique Program Design & Outcomes (00:14:50)

8. Key Learnings from the First Cohort (00:16:23)

9. Feedback & Areas to Improve (00:19:09)

10. What’s Next for the Fund (00:21:50)

11. Rapid Fire Round (00:23:00)

12. Call to Action (00:24:23)