Org

• CNCF TAG-Security checked by automation only, still a draft
  The CNCF Security Technical Advisory Group, publisher of the Secure Software Factory whitepaper from its cncf/tag-security repository (now archived), which licenses its documentation under CC BY 4.0.

• SLSA project (OpenSSF) checked by automation only, still a draft
  The OpenSSF project that publishes the SLSA specification from the slsa-framework/slsa repository, governed by a steering committee and licensed under the Community Specification License 1.0.