# \[RFC\] GitHub Open Source Secure Fund

**URL:** <https://discourse.haskell.org/t/rfc-github-open-source-secure-fund/11025>\
**Category:** Haskell Foundation\
**Created:** [December 14, 2024, 10:41pm UTC](https://discourse.haskell.org/t/rfc-github-open-source-secure-fund/11025 "2024-12-14T22:41:27Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![gdifolco](https://sea2.discourse-cdn.com/flex002/user_avatar/discourse.haskell.org/gdifolco/32/2416_2.png) [@gdifolco](https://discourse.haskell.org/u/gdifolco)\
**Post date:** [December 14, 2024, 10:41pm UTC](https://discourse.haskell.org/t/rfc-github-open-source-secure-fund/11025/1 "2024-12-14T22:41:27Z")

</div>

GitHub opened a program to [fund security enhancements of FOSS](https://github.blog/news-insights/company-news/announcing-github-secure-open-source-fund/) projects open until January 7th.

The [HSRT](https://www.haskell.org/security/) is planning to apply to it and we’d like to open a discussion about potential project(s).

Don’t hesitate to propose any project ideas here.

Regards.

PS: for reference, the HSRT brainstormed these project ideas:

- GitHub integration (cabal audit action)
  - Correct file/line
  - Snippet proposition/PR opening

- Hackage
  - show known vulnerability info

- vulnerabilities endpoints (publish vulnerability info)
  - e.g. [advisories.haskell.org/.](http://advisories.haskell.org/.)…
  - [API server (#166)](https://github.com/haskell/security-advisories/issues/166)

- improve the HTML presentation of the advisories
  - [https://haskell.github.io/security-advisories/advisory/.](https://haskell.github.io/security-advisories/advisory/)…

---

<div class="post-metadata">

**Author:** ![hasufell](https://sea2.discourse-cdn.com/flex002/user_avatar/discourse.haskell.org/hasufell/32/1250_2.png) [@hasufell](https://discourse.haskell.org/u/hasufell)\
**Post date:** [December 20, 2024, 6:53am UTC](https://discourse.haskell.org/t/rfc-github-open-source-secure-fund/11025/2 "2024-12-20T06:53:28Z")

</div>

@ApothecaLabs have you considered applying regarding the Botan bindings?