Securing Open Source Software Act of 2023

The Securing Open Source Software Act of 2023 requires federal agencies to improve the security of open source software, which is widely used in government systems and critical infrastructure. The bill mandates that the Department of Homeland Security develop a framework for assessing security risks in open source software components, conduct regular assessments of software used by federal agencies, and coordinate with the open source community. It establishes pilot programs for federal agencies to create "open source functions" modeled after those in the private sector to manage risks and encourage secure usage. The law affects all covered federal agencies and requires them to report on their efforts to Congress. This represents a concrete policy change that shifts federal responsibility toward securing the open source software ecosystem.