Eclipse SW360

" summary

Eclipse SW360 is an open-source (EPL-2.0) web application and REST API for building and maintaining software Bill-of-Materials (SBOMs). It ingests SBOMs from dependency/package managers or SPDX files, stores data or imports it on-the-fly, and provides component tracking, vulnerability assessment, license/trade compliance management (including triggering FOSSology scans), policy enforcement and usage statistics, with plans for federated instances and full DevOps integration via its API.

AI-written summary · about

" related talks

• 43mSBOM Management with SW360: Cross-Industry Perspectives and Best PracticesKouki Hama, Arun Azhakesan, Katharina Ettinger · EclipseCon 2023
• 50mEclipse Apoapsis - Open Source based Software Composition Analysis at scaleMarcel Kurzmann · foss-north 2024
• 42mThe SBOM Way! The Art of Consuming, Enriching, and Managing Inbound..Anupam Ghosh, Arun Azhakesan · Open Source Summit Europe 2023
• 40mHow I Learned to Stop Worrying and Love the SBOMShelley Lambert · EclipseCon 2022
• 39mSBOM Automation - Making Compliance Effortless by Consuming, Enrichin...Kouki Hama, Arun Azhakesan · SupplyChainSecurityCon @ Open Source Summit Japan 2023
• 47mThe Missing Link - How we collect and leverage SBOMsCassie Crossley · OWASP Global AppSec San Francisco 2024
• 42mThe SBOM Way! The Art of Consuming, Enriching, and Managing Inbound..Anupam Ghosh, Arun Azhakesan · SupplyChainSecurityCon @ Open Source Summit Europe 2023
• 50mSBOM SmackDown: Conquer dragons in the shadows with OWASP CycloneDXSteve Springett · Global AppSec US 2021 Virtual