Automating OpenChain with an open source CI pipeline
summary
Describes an automated CI pipeline built with open source tools that links developer workflows and version control through testing to produce OpenChain compliance reports and compliant hosted container images. Covers tooling and processes used to track open source code across multiple customer projects and how continuous integration delivers compliance artifacts; the work was developed as part of the DITO project funded by Innovate UK.
AI-written summary · about
related talks
19mHow to utilize Open Source tools to create CI/CD & DevOps workflows
23mBuilding a Secure By-Design Pipeline with an Open-Source Stack
07mWhat does open source need from CI/CD?
33mHow OpenChain Became The International Standard for Compliance
33mThe “C” in CI/CD is not for “Closed”
42mOpen Source Compliance Management - Removing the Thorn from...
48mBuilding a CI/CD Process for Open Source Projects
38mPanel: Open Source Management Based on Open Source