118th Congress Government Operations and Politics
H.R. 3286: Securing Open Source Software Act of 2023
Reported
- Introduced (completed)
- Passed House (not reached)
- Passed Senate (not reached)
- To the President (not reached)
- Became law (not reached)
Summary
This bill sets forth the duties of the Cybersecurity and Infrastructure Security Agency (CISA) regarding open source software security.
Open source software means software for which the human-readable source code is made available to the public for use, study, reuse, modification, enhancement, and redistribution.
Specifically, CISA must
Read the full summary
- perform outreach and engagement to bolster the security of open source software;
- support federal efforts to strengthen open source software security;
- coordinate with nonfederal entities on efforts to ensure long-term open source software security;
- serve as a public point of contact regarding open source software security for nonfederal entities; and
- support federal and nonfederal supply chain security efforts by encouraging efforts to bolster open source software security.
CISA must (1) publish a framework, incorporating government, private sector, and open source software community frameworks and best practices, for assessing the risk of open source software components; (2) update the framework at least annually; and (3) ensure, to the greatest extent practicable, that the framework is usable by the open source software community.
The bill requires CISA to assess open source software components deployed on high value assets at federal agencies based on the framework and provides for a pilot assessment of critical infrastructure.
CISA's Cybersecurity Advisory Committee may establish a software security subcommittee.
Written by the Congressional Research Service, Library of Congress.
Roll calls
No roll call votes have been held on this bill.
Amendments
No amendments were offered to this bill.
Cosponsors
- Andrew Garbarino R-NYOriginal
- Eric Swalwell D-CAOriginal
- Nicolas LaLota R-NY
Who scored on this bill
- 1Mark Green SponsorDrew cross-party cosponsors, introduced, reported, discharged4 events+50
See all scorers and every scoring event
Introductions and cosponsorships count toward weekly caps and show no points.
Other bills by Mark Green
- H.R. 1000: Cyber PIVOTT Act
- H.R. 2794: Border Reinforcement Act of 2023
- H.R. 9770: Cyber PIVOTT Act
- H.R. 8610: Counter-UAS Authority Security, Safety, and Reauthorization Act
- H.J.Res. 164: Disapproval of Department of Commerce rule: Revision of Firearms License Requirements
- H.R. 8001: Combating Houthi Threats and Aggression Act
History
- Introduced in the House by Mark Green.
Show the full action history (7 actions)
- Reported (Amended) by the Committee on Homeland Security. H. Rept. 118-160, Part I.
- Committee on Oversight and Accountability discharged.
- Placed on the Union Calendar, Calendar No. 127.
- Committee Consideration and Mark-up Session Held.
- Ordered to be Reported (Amended) by Voice Vote.
- Introduced in House
- Referred to the Committee on Homeland Security, and in addition to the Committee on Oversight and Accountability, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.