GitHub Security Lab’s mission is to empower developers and secure open source. We do that in a number of ways:
- by finding and disclosing vulnerabilities in open source. We publish our advisories on our website.
- reviewing advisories that affect open source projects hosted on GitHub and notifying affected developers and maintainers. See GitHub’s advisory database.
- educating the community and empowering developers via in-person events (you can meet us during any events listed in the event calendar)
- scaling the security research community’s work with our CodeQL bug bounty programme. See rules.
In this organisation, you will find some of our projects aiming to educate the community and empower developers or security researchers. Check out also our team repository at github/securitylab
Questions? Join us on our Slack server.
