Open Compliance Reference Tooling
summary
Shows how to build an automated open-source compliance pipeline using OSS Review Toolkit as the orchestrator and tools such as ScanCode and FOSSology, plus standards like SPDX and data sources like ClearlyDefined. Describes the necessary processes and workflows (including one CI/CD reference process) to integrate these components, and includes a short demo highlighting benefits and challenges.
AI-written summary · about
related talks
33mORT Automate compliance using Open Source & InnerSource
30mORT: Automate your open source policy using Open Source & Inner Source
28mGenerating a SPDX SBOM for Your Code in CI Using ORT
15mShifting Open Source Compliance Activities Left
18mExploration of Compliance Governance Based on Operating Systems
30mFast, Lean, Precise, Controlled: Compliance Automation With OSCAL in Our Open-S...
05mHow To Automate Compliance If You Aren't Chuck Norris
38mPanel: Open Source Management Based on Open Source