The Linux Foundation has announced the allocation of grants totaling $12.5 million to assist in the maintenance of significant open projects and the development of solutions to enhance security. The funding for these grants has been provided by companies including Anthropic, AWS, GitHub, Google, Google DeepMind, Microsoft, and OpenAI.
The distribution of funds will be managed by the Alpha-Omega project and the OpenSSF organization, established under the auspices of the Linux Foundation to work in areas such as auditing and testing the security of open source software, coordinated vulnerability disclosure, dissemination of fixes, development of security tools, publication of best practices for secure development, and identification of security-related threats in open source software.
The allocated funds will provide maintainers with additional resources as the process of ensuring security becomes more complex, the speed of vulnerability detection increases, and the flow of reports about new vulnerabilities caused by the use of rapidly evolving AI tools grows. Recently, maintainers have been facing an influx of vulnerability reports, many of which are generated automatically, without having the necessary resources and tools to effectively address and resolve such issues.
Alpha-Omega and OpenSSF will work directly with communities and developers involved in the maintenance of open projects to develop new security tools that integrate with existing workflows in open source software. The initiative will also help form strategies that assist maintainers in meeting the growing security demands and enhance the overall resilience of the open source software ecosystem.
Source: opennet.ru
