From sandbox to incubating: gittuf’s next step in open source security


Professor Justin Cappos leads gittuf, a Git security framework that advanced to OpenSSF's Incubating Project stage. The platform adds cryptographic access controls and tamper-evident logging to repositories without disrupting developer workflows. "gittuf addresses a critical gap in the software development process by securing Git at its core," said Cappos, who serves on gittuf's Governing Board. His research team won a Distinguished Paper Award, with Ph.D. candidate Aditya Sirish A Yelgundhalli as maintainer.