SCANOSS: Democratising Open Source Risk Management
summary
Presents SCANOSS, an open-source alternative to proprietary Software Composition Analysis (SCA) tools aimed at DevOps environments. Describes providing a free, standardized OSS inventorying and risk-management solution to replace closed SCA vendors and lower costs for smaller organizations and their customers.
AI-written summary · about
related talks
35mOSCAR - Automate software analysis, compliance and security
23mSBOM adopatability in open source software scanning
54mBehind the scenes of open source software: trust and security in a business context
31mOpen Source SCA
27mBeyond Open Source Risks With the CRA and NIS2
35mOpen Source Software (OSS) Transparency for Acquisition
26mLooking at Open Source Security from the Community Angle
42mAssessing the Risk of Open-source Components Using OpenSSF's Scorecard