In Session 4 of the GitHub Secure Open Source Fund, 50 open source projects upgr

GitHub's Secure Open Source Fund combines financial support with security work that maintainers must carry out. Its Session 4 account reports that 92% of the fifty participating projects finished with core security features enabled, including secret scanning and protected branches.

The program pairs a three-week sprint with support over twelve months, tying funding to goals and follow-up checks. AI-assisted investigation and code review are parts of that process, while maintainers decide what ships. The reported result is evidence of security-tool adoption within the cohort, rather than an isolated measurement of how much AI reduced vulnerabilities.