S. 917 · 118th Congress
Securing Open Source Software Act of 2023
Key: what the circles and colors mean
Each circle is a bill. The ring fills as it moves through Congress:
Under the number: the Yea · Nay count of its final (or latest) recorded vote. On a member's page, the small badge is how that member voted: Y Yea / Aye, N Nay / No, P Present, – Not voting.
Gold and violet are only for Yea and Nay; they never mean a party. A member's party is the letter on their photo.
Never voted on. It didn't reach a floor vote before the 118th Congress ended, so it expired. A bill has to be introduced again to be considered in a new Congress.
D
PetersSponsor1 cosponsor · 1 R
1 signed on when it was introduced; the rest joined later. Cosponsors who withdrew aren't shown.
This bill sets forth the duties of the Cybersecurity and Infrastructure Security Agency (CISA) regarding open source software security.
What it does: CRS summary · Reported to Senate · May 16, 2023
Securing Open Source Software Act of 2023
This bill sets forth the duties of the Cybersecurity and Infrastructure Security Agency (CISA) regarding open source software security.
Open source software means software for which the human-readable source code is made available to the public for use, study, reuse, modification, enhancement, and redistribution.
Specifically, CISA must
- perform outreach and engagement to bolster the security of open source software;
- support federal efforts to strengthen open source software security;
- coordinate with nonfederal entities on efforts to ensure long-term open source software security;
- serve as a public point of contact regarding open source software security for nonfederal entities; and
- support federal and nonfederal supply chain security efforts by encouraging efforts to bolster open source software security.
CISA must (1) publish a framework, incorporating government, industry, and open source software community frameworks and best practices, for assessing the risk of open source software components; (2) update the framework at least annually; and (3) ensure, to the greatest extent practicable, that the framework is usable by the open source software community.
The bill requires CISA to assess open source software components used by federal agencies based on the framework and provides for a pilot assessment of critical infrastructure.
CISA's Cybersecurity Advisory Committee may establish a software security subcommittee.
The Office of Management and Budget, in coordination with CISA, the Office of the National Cyber Director, and the General Services Administration, shall issue guidance on the responsibilities of the chief information officers at specified agencies regarding open source software.
Written by the nonpartisan Congressional Research Service. All summary versions on Congress.gov
About this bill and sources
Official title: Securing Open Source Software Act of 2023
Latest action (May 16, 2023): Placed on Senate Legislative Calendar under General Orders. Calendar No. 76.
Policy area: Government Operations and Politics · Origin: Senate · Introduced: Mar 22, 2023
Official page on Congress.gov · Bill text (GovInfo) · Status record (XML)
No recorded floor vote found.