GitHub Secure Open Source Fund!

[krassowski]

The deadline is January 7th. Briefly, it is focused on addressing security debt; the funds are distributed via GitHub Sponsors.

https://github.blog/news-insights/company-news/announcing-github-secure-open-source-fund/
https://resources.github.com/github-secure-open-source-fund/

• Time commitment: 2 sessions each 2 hours for 3 weeks = 12 hours; min 80% attendance expected

Cross-posting from jupyter-governance/ec-team-compass#80.

[dlqqq]

Sorry for missing this Mike. I must have dismissed this notification by accident. Wish we could have acted on this.

We don't review the issues on this repo regularly since they are sparse. Rick & Matthias generally respond to every email, so that may be a better way to reach us in the future.

[krassowski]

Should I email security@ipython.org in the future? Or is there another secret email I should use? I do not see anything listed here

[rpwagner]

@krassowski this is the right place. We just didn't have the capacity to respond last month.

[rpwagner]

Re-opening this so we can track the application we submitted on 26 January 2025.

[RRosio]

I will just add that I would be happy to volunteer, if there is space.

[dlqqq]

Noting here in writing that I also volunteer to be part of the GitHub Secure Open Source training program. Thank you @krassowski and @rpwagner for driving this (despite our late application)!

[rpwagner]

I got an email from the organizer we met with this week asking for some details, to be shared with the selection committee by tomorrow morning:

• Project Logo
• Maintainer Info: Name and GitHub Handle
• Location: Where is each maintainer located? (example: Brazil)
• Headshot/Photo(s) of up to three participating maintainers
• Video: A short video, no longer than 60 seconds.
  • Maintainer Names
  • Project name
  • Share your project one-liner and what your project does (think Readme headline)
  • Share how your project impacts or empowers people
  • How would being accepted into the program help you improve security and what are you most excited about? (The video does not need to be edited and you can be as creative as you like.)

I threw together a Google Doc and recorded a quick video, naming @krassowski, @dlqqq, and @RRosio as the intended participants.

Apparently an email was sent earlier asking for this but I did not receive. If we're not selected, I'll take responsibility for my rushed video. I'm sure other project put together more exciting ones.

[rpwagner]

naming @krassowski, @dlqqq, and @RRosio as the intended participants.

And my sincere thanks to all three of you for having headshots on your GitHub profiles!

[dlqqq]

@rpwagner Thank you for owning that! Let me know if I can help you with this program in any way; I appreciate your work.