Ortelius Project Summit
summary
Ortelius collects supply‑chain evidence into a catalog and moves its metadata to a blockchain‑backed, immutable SBOM ledger with IPFS/Filecoin long‑term storage while deduplicating SBOM contents to avoid redundancy. A new subproject, Emporous universal object reference, uses OCI artifacts and annotations plus a single API and CLI to discover, tag and relate container images, SBOMs and other artifacts. The stack shifts to Go and JavaScript, offers $75k in bounties and GitHub sponsorship payouts, and plans normalized schemas and provenance linking.
AI-written summary · about
chapters (14)
- 0:00Ortelius Project intro
- 1:52Supply chain evidence goals
- 3:59Visionary Summit awards
- 7:32Ortelius architecture evolution
- 9:00Blockchain for metadata
- 10:44Bounties and sponsorships
- 13:35Imports project intro
- 18:06OCI artifacts management
- 21:42CLI tools future
- 26:06Community next steps
- 27:51DevOps setup languages
- 28:55Blockchain artifact navigation
- 30:17AI DevOps pipelines
- 31:19Upcoming events
related talks
31mOpen Source SCA
34mTransforming SBOMs from Compliance Burden to Security Asset
31mOmniBOR: Bringing the Receipts for Supply Chain Security
36mArkisto: an open-source, standards-based framework for digital preservation
11mOSS Supply Chain Security
01h 26mPractical Software Bill of Materials: From Generation to Distribution Workshop
22mGuardians of Code: Continuously Monitoring Security and DevOps Compliance
37mSecuring OSS across the whole supply chain and beyond