GitHub funds 50 projects for AI-era security

GitHub’s Secure Open Source Fund invested more than $500,000 across 50 projects, giving each maintainer team $10,000 plus a year of security guidance, tools, and cloud credits. The Session 4 report says AI-assisted workflows sped investigation and remediation, but maintainers still supplied the judgment and accountability for what shipped. That is a useful supply-chain counterweight to stacked agent-authored pull requests: more generated code makes funded, human-led security maintenance infrastructure—not just faster review—the scarce layer.