; and (2) are published on the website of each such Center. (h) Application To be eligible for an award of a grant, contract, or cooperative agreement as a Center, a covered entity shall submit to the Secretary an application at such time, in such manner, and including such information as the Secretary may require. (i) Public reporting of vulnerabilities The Under Secretary for Science and Technology shall ensure that vulnerabilities discovered by a Center are reported to the National Vulnerability Database of the National Institute of Standards and Technology, as appropriate and using the coordinated vulnerability disclosure processes established under subsection (g). (j) Additional guidance The Under Secretary for Science and Technology, in coordination with the Director, shall develop, and periodically update, guidance, including eligibility and any additional requirements, relating to how Centers may award grants to communities of interest pursuant to subsection (e)(5) to mitigate and remediate vulnerabilities and take other actions under such subsection and subsection (k). (k) Open source software security grants (1) In general Any Center addressing open source software security may, in consultation with the Under Secretary for Science and Technology and Director, award grants to individual open source software developers and maintainers, nonprofit organizations, and other non-Federal entities as determined appropriate by any such Center, to fund improvements in the security of the open source software ecosystem. (2) Improvements A grant awarded under paragraph (1) may include improvements such as the following: (A) Security audits. (B) Funding for developers to patch vulnerabilities. (C) Addressing code, infrastructure, and structural weaknesses, including rewrites of open source software components in memory-safe programming languages. (D) Research and tools to assess and improve the overall security of the open source software ecosystem, such as improved software fault isolation techniques. (E) Training