Google has announced a new Open Source Software Vulnerability Rewards Program (OSS VRP), focusing specifically on its latest versions of open-source software (Google OSS) and repository settings like GitHub actions, application configurations, and access control rules.