; (v) a summary of changes made to the assessment conducted pursuant to paragraph (2)(E) since the last report submitted under this subparagraph, including overall security trends; and (vi) a summary of the types of entities with which the an assessment conducted pursuant to paragraph (2)(E) since the last reported submitted under this subparagraph was shared pursuant to paragraph (2)(H), including a list of the Federal and non-Federal entities with which the assessment was shared. (B) Public report Not later than 30 days after the date on which the Director submits a report required under subparagraph (A), the Director shall make a version of the report publicly available on the website of the Agency. . (b) Technical and conforming amendment The table of contents in section 1(b) of the Homeland Security Act of 2002 ( Public Law 107–296 ; 116 Stat. 2135) is amended by inserting after the item relating to section 2220E the following: Sec. 2220F. Open source software security duties. . 4. Software security advisory subcommittee Section 2219(d)(1) of the Homeland Security Act of 2002 ( 6 U.S.C. 665e(d)(1) ) is amended by adding at the end the following: (E) Software security, including open source software security. . 5. Open source software guidance (a) Definitions In this section: (1) Appropriate congressional committee The term appropriate congressional committee has the meaning given the term in section 2 of the Homeland Security Act of 2002 ( 6 U.S.C. 101 ). (2) Covered agency The term covered agency means an agency described in section 901(b) of title 31, United States Code. (3) Director The term Director means the Director of the Office of Management and Budget. (4) National security system The term national security system has the meaning given the term in section 3552 of title 44, United States Code. (5) Open source software