How OSPOs can help secure the software supply chain

" summary

Explains how Open Source Program Offices (OSPOs) manage legal risk and software supply chain tasks—like license compliance reviews, inbound-code review, contribution processes, and use of Software Composition Analysis (SCA) tools such as SBOMs and license scanners. Describes variations in practice (buying SCA solutions from vendors like Synopsys or Tidelift versus building in-house tools) and how OSPOs evolve and help grow the SCA tooling ecosystem to meet industry needs.

AI-written summary · about

" related talks

• 26mLooking at Open Source Security from the Community AngleAna Jiménez Santamaría · FOSS Backstage 2024
• 36mWhy OSPOs are Important To A Company's Innovation Strategy?Nithya A. Ruff · Open Source Summit + Embedded Linux Conference + OSPOCon 2021
• 34mThe Role of OSPO Manager for the Organization’s SuccessKiran Kumar Reddy Aluka, Sudhakar · Open Source Summit India 2025
• 31mHas Open Source outgrown the OSPO?Per Ploug Krogslund · FOSS Backstage 2024
• 34mSupply Chain Security, SBOMs and How OSPOs Can Play An Important Role Going Forward - An Ecosystem and Compliance UpdateJeffrey Borek · Open Source Summit North America 2022
• 32mOSPOs: Key Lever for Open Source SustainabilityAna Jiménez Santamaría · FOSS Backstage 2023
• 40mHow Can Your OSPO Drive Open Source Business Value for Your Organization?Masae Shida · Open Source Summit Europe 2023
• 37mYour OSPO’s Role in Ensuring Long-Term Business ViabilityMasae Shida · OSPOCon @ Open Source Summit Japan 2023