initial blog for gh oss

Author: reshamas

_posts/2025-08-16-gh-oss.md

@@ -0,0 +1,127 @@
+---
+title: "scikit-learn completes the GitHub OSS Fund Training"
+date: August 16, 2025
+categories:
+  - Press
+tags:
+  - Open Source
+featured-image: /assets/images/posts_images/gh-oss-fund/gh-oss-blog.png
+
+postauthors:
+  - name: Reshama Shaikh
+    website: https://reshamas.github.io
+    image: reshama_shaikh.jpeg 
+---
+
+<div>
+  <img src="{{ page.featured-image }}" alt="">
+  {% include postauthor.html %}
+</div>
+
+## Summary
+
+scikit-learn was honored to be selected to participate in Cohort 2 of the GitHub Secure Open Source Fund (OSF) Training Program. Cohort 1 took place earlier in 2025 with 19 projects, and Cohort 2 took place with 52 projects during June 2025. 
+
+It was an intense 3-week intense training program, with over 90 open source maintainers joining the training. Read the announcement from GitHub: [Securing the supply chain at scale: Starting with 71 important open source projects](https://github.blog/open-source/maintainers/securing-the-supply-chain-at-scale-starting-with-71-important-open-source-projects) (11-Aug-2025) 
+
+<figure>
+ <img src="/assets/images/posts_images/gh-oss-fund/gh-oss-blog.png" alt="logos of 15 funding partners" max-width="50%" max-height="50%" /> 
+ <figcaption>
+ Original post: <a href="https://github.blog/open-source/maintainers/securing-the-supply-chain-at-scale-starting-with-71-important-open-source-projects">GH Secure OSS Announcement</a>
+ </figcaption>
+</figure>
+
+### GitHub Security Lab
+GitHub has its own security department, and GitHub Security Lab’s mission is to empower developers and secure open source.
+* GitHub Security Lab: [Resources](https://securitylab.github.com/resources-os)
+
+<figure>
+ <img src="/assets/images/posts_images/gh-oss-fund/gh-security-lab.png" alt="GitHub Security Lab" max-width="50%" max-height="50%" /> 
+ <figcaption>
+ Original post: <a href="https://github.com/GitHubSecurityLab">GitHub Security Lab</a>
+ </figcaption>
+</figure>
+
+
+## Resources for Security Training
+The training provided many trainings by experts in the field. Below we share trainings that are available to the public.
+
+- [Configuring private vulnerability reporting for a repository](https://docs.github.com/en/code-security/security-advisories/working-with-repository-security-advisories/configuring-private-vulnerability-reporting-for-a-repository)
+>Owners and administrators of public repositories can allow security researchers to report vulnerabilities securely in the repository by enabling private vulnerability reporting.
+- [OpenSSF Scorecard](https://securityscorecards.dev)
+- [Secure by design: A UX toolkit](https://microsoft.design/articles/secure-by-design-a-ux-toolkit)
+
+#### CodeQL: From Zero to Hero
+slides: [Finding Vulnerabilities with CodeQL](https://github.com/sylwia-budzynska/2025-soss-codeql-workshop/blob/main/SOSS-CodeQL-slides.pdf)
+
+<figure>
+ <img src="/assets/images/posts_images/gh-oss-fund/CodeQL.png" alt="CodeQL audience and topics covered" max-width="50%" max-height="50%" /> 
+ <figcaption>
+ Original post: <a href="https://github.com/sylwia-budzynska/2025-soss-codeql-workshop">GH Secure OSS Announcement</a>
+ </figcaption>
+</figure>
+
+#### Developing Secure Software
+Learn the security basics to develop software that is hardened against attacks, and understand how you can reduce the damage and speed the response when a vulnerability is exploited. This course includes specific tips on how to use and develop open source and other software securely. It was developed by the Open Source Security Foundation (OpenSSF), a cross-industry collaboration that brings together leaders to improve the security of open source software by building a broader community, targeted initiatives, and best practices.
+
+* Online, Self Paced
+* 16-20 Hours of Course Material
+* Quizzes and Hands-on Labs
+
+<figure>
+ <img src="/assets/images/posts_images/gh-oss-fund/dss-lfd121.png" alt="course: Developing Secure Software" max-width="50%" max-height="50%" /> 
+ <figcaption>
+ Original post: <a href="https://training.linuxfoundation.org/training/developing-secure-software-lfd121">LFD121: Developing Secure Software</a>
+ </figcaption>
+</figure>
+
+#### OSS-Fuzz
+
+<figure>
+ <img src="/assets/images/posts_images/gh-oss-fund/dss-fuzz.png" alt="OSS-Fuzz" max-width="50%" max-height="50%" /> 
+ <figcaption>
+ Original post: <a href="https://github.com/google/oss-fuzz">OSS-Fuzz</a>
+ </figcaption>
+</figure>
+
+
+### Secure Code Game
+
+<figure>
+ <img src="/assets/images/posts_images/gh-oss-fund/secure-code-game.png" alt="Secure Code Game" max-width="50%" max-height="50%" /> 
+ <figcaption>
+ Original post: <a href="https://github.com/skills/secure-code-game">Secure Code Game</a>
+ </figcaption>
+</figure>
+
+
+### References
+- [Securing the supply chain at scale: Starting with 71 important open source projects](https://github.blog/open-source/maintainers/securing-the-supply-chain-at-scale-starting-with-71-important-open-source-projects) (11-Aug-2025)
+- [GitHub Secure Open Source Fund](https://resources.github.com/github-secure-open-source-fund/)
+- [GitHub launches $1.25M open source fund with a focus on security](https://techcrunch.com/2024/11/19/github-launches-1-25m-open-source-fund-with-a-focus-on-security) (November 2024)
+- [Eclipse Foundation Security Policy](https://www.eclipse.org/security/policy)
+- [Linux Foundation Security Policy](https://www.linuxfoundation.org/security)
+
+### Blogs from other open source projects
+- OpenCV: [https://opencv.org/blog/opencvs-participation-in-the-github-secure-open-source-fund](https://opencv.org/blog/opencvs-participation-in-the-github-secure-open-source-fund)
+
+## Acknowledgments
+
+Thank you to the sponsors of the GitHub Secure Open Source Secure Fund.
+
+<figure>
+ <img src="/assets/images/posts_images/gh-oss-fund/ghs-oss-funders.png" alt="Sponsors" max-width="50%" max-height="50%" /> 
+ <figcaption>
+ <a href="https://github.blog/open-source/maintainers/securing-the-supply-chain-at-scale-starting-with-71-important-open-source-projects"></a>
+ </figcaption>
+</figure>
+
+Thank you to the ecosystem partners of the GitHub Secure Open Source Secure Fund.
+
+<figure>
+ <img src="/assets/images/posts_images/gh-oss-fund/ghs-oss-ecosystem.png" alt="Ecosystem Partners" max-width="50%" max-height="50%" /> 
+ <figcaption>
+ <a href="https://github.blog/open-source/maintainers/securing-the-supply-chain-at-scale-starting-with-71-important-open-source-projects"></a>
+ </figcaption>
+</figure>
+