https://github.com/open-source/github-secure-open-source-fund
We had a few participants in the first iteration of this Fund and this might be of interest to some of you. I recommend reading about it from the webpage, but my informal summary is that you spend some time learning about security with a strong focus on doing it via the GitHub platform; Actions, Dependabot, Copilot, automation, etc. You’ll spend a few hours per week in lectures and doing a few exercises; not necessarily too hard, but you’ll get out of it proportionally how much you put into it. I think it would be useful for anyone wanting to learn and to become more familiar with GitHub overall. And it is funded, and I’m asking their planners to make the funding more appropriate for a project of the size of Nixpkgs (we don’t have 1-2 maintainers, but a whole lot more).
Deadline is March 20th. Feel free to message me with any questions.