Double Open: An automated open source compliance pipeline for Yocto built on SPDX
summary
An overview of an automated open-source compliance pipeline for Yocto and embedded Linux that uses SPDX as the central data format; it describes tooling built around Yocto which records and manages compliance information in SPDX to enable modularity and interoperability with other tools.
AI-written summary · about
related talks
33mAutomation of SBOM Assessment in AGL Development Process
30mContinuous Compliance in Open Source: Safety Assurance Through S...
28mGenerating a SPDX SBOM for Your Code in CI Using ORT
53mAdvancing Transparency and Security in Software: A Deep Dive into SBOM and SPDX
38mSafe Systems with Linux
28mKeeping Networks Secure: The Open Way
41mThe State of SBoMs in Embedded
18mZero-Touch SBOM Generation: Secure Your Build From the Inside Out