A complete solution for open data platforms, enterprise data catalogs, data lakes and data management. Open source, mature, fully-featured and production ready.

DataHub

Also is there a canonical response to <https://github.blog/2023-03-03-github-security-lab-audited-datahub-heres-what-they-found/>? Getting some queries from internal compliance (&amp; I expect later on auditors) about this

Yes for sure, and glad to see the mitigations / follow-ups

Mostly curious if there's an artifact describing current security posture / checks in place to ensure a strong ongoing awareness of any concerns.

There's some information at <https://github.com/datahub-project/datahub/security>. I don't know of any (non-security related) open source projects that have a published "security posture". If you know of any that we could learn from, that would be great.

In any case, there's use of static/code analysis tools to detect vulnerabilities. There are also occasional pentests. We are also hoping to setup a security bug bounty program in the near future.

That's definitely helpful, thanks <@U05SKM6KGGK>