Commoditising Open Source Risk Management

" summary

Describes SCANOSS, an open-source Software Composition Analysis (SCA) platform that includes mining tools, a database engine, a scanning engine, command-line interfaces, and a cross-platform auditing UI. Explains how making all components fully open source is intended to lower barriers for Open Source Risk Management and encourage SBOM adoption among independent developers, SMEs, and larger organizations.

AI-written summary · about

" related talks

• 38mOpen Source Licensing in the Era of AI-Assisted CodingJulian Coccia · EclipseCon 2023
• 23mSBOM adopatability in open source software scanningAnitha Dakamarri · Commit Your Code 2025
• 54mBehind the scenes of open source software: trust and security in a business contextRadosław Klewin, Tomasz Dziedzic · Open Source Day 2024
• 31mOpen Source SCAJulian Coccia · foss-north 2022
• 31mThe Value of OSS Management for Risk MitigationAna Jiménez Santamaría, Daniel Izquierdo · FOSS Backstage 2025
• 38mPanel: Open Source Management Based on Open SourceNikola N, Marcel K, Takashi N, Ayumi W, Helio Chissini · Open Source Summit Japan + AI_dev: Open Source GenAI & ML Summit + Automotive Linux Summit 2025
• 28mGoverning Open Source in the Enterprise: OSPO Strategies for Innovation and ComplianceDavid Hirsch · Open Source Summit Korea 2025
• 35mOSCAR - Automate software analysis, compliance and securityStefan Just · EclipseCon Europe 2018