arrow_back Civic Audit
Share share

Securing Government Software: Boosting Open Source Security

This law aims to make the software used by the U.S. government and critical infrastructure more secure, especially open source software. It requires agencies to assess and manage risks associated with this software, ultimately helping protect the digital services citizens rely on.
Key points
Government agencies must improve how they use and secure open source software.
A government agency (CISA) will assess the security risks of open source software used by the government.
Agencies will get guidance on securely using and contributing to open source software.
Efforts will be made to improve the security of open source software used in critical infrastructure.
article Official text account_balance Process page notifications_active Track this Bill
gavel
Status:
Expired
Record your position for audit.
Why does your vote on bills matter?
It creates raw, undeniable proof. Civic Will provides the permanent data to verify the Government's loyalty towards its citizens (explained here). Start recording it now.
Additional Information
Print number: 117_S_4913
Sponsor: Sen. Peters, Gary C. [D-MI]
Process start date: 2022-09-21
System Note: Lustra is free, publicly auditable civic infrastructure, with full source code available on GitHub. You are reading sterilized legislative data, processed by our radical neutrality engine to strip political spin and retain factual mechanics. We process only official government data. Original documents remain the authoritative source, always verify them if you can.
Summarized by: gemini-2.5-flash-preview-04-17
Source data: api.congress.gov
AI work logs for this document launch

OFFICIAL LEGAL TITLE

Securing Open Source Software Act of 2022

FREQUENTLY ASKED QUESTIONS

What is the official ID of this bill?

The official print number for this legislation is 117_S_4913.

Which chamber initiated this legislation?

This legislation was initiated in the Senate.

When did the legislative process begin?

The process officially started on 2022-09-21.

What are the main provisions?

Key points include:

  • Government agencies must improve how they use and secure open source software.
  • A government agency (CISA) will assess the security risks of open source software used by the government.
  • Agencies will get guidance on securely using and contributing to open source software.
  • Efforts will be made to improve the security of open source software used in critical infrastructure.
What is the specific legal status?

The current status is Expired.

Where can I read the full text of this legislation?

The full official text is available at: View full text

Who is the primary sponsor?

The primary sponsor is Sen. Peters, Gary C. [D-MI].

What is the latest detailed status?

The latest detailed status is: Placed on Senate Legislative Calendar under General Orders. Calendar No. 677.

Is this summary verified?

Yes. This content was analyzed by AI and verified by the Lustra Judge System on 2025-12-29.

What is the impact of this bill?

We don't know, that is up to you to decide. Summarizing raw data with AI is fundamentally different from predicting socio-economic outcomes. As of 2026, we believe impact assessment strictly requires a human in the loop to verify and judge.

CATEGORIES

Security Informatization