; and (B) consult with the National Cyber Director regarding such activities, as appropriate. (4) Reports (A) In general Not later than one year after the date of the enactment of this section and every two years thereafter for the following six years, the Director shall submit to the appropriate congressional committees a report that includes for the period covered by each such report the following: (i) A summary of the work on open source software security performed by the Director, including a list of the Federal and non-Federal entities with which the Director interfaced. (ii) The framework under paragraph (2)(A) or a summary of any updates to such framework pursuant to paragraph (2)(B), as the case may be. (iii) A summary of each assessment under paragraph (2)(E)(i). (iv) A summary of changes made to each such assessment, including overall security trends. (v) A summary of the types of entities with which each such assessment was shared pursuant to paragraph (2)(H), including a list of the Federal and non-Federal entities with which such assessment was shared. (vi) Information on resources, including staffing, allocated to the Director’s open source software responsibilities under this section. (B) Public report Not later than 30 days after the date on which the Director submits each report required under subparagraph (A), the Director shall make a version of each such report publicly available on the website of the Agency. . (b) Technical and conforming amendment The table of contents in section 1(b) of the Homeland Security Act of 2002 is amended by inserting after the item relating to section 2220E the following new item: Sec. 2220F. Open source software security duties. . (c) Software security advisory subcommittee Section 2219(d)(1) of the Homeland Security Act of 2002 ( 6 U.S.C. 665e(d)(1) ) is amended by adding at the end the following: (E) Software security, including open source software security. . (d) Rule of construction Nothing in this Act or the amendments made by this Act may be construed to