How to manage OSS license obligations and SBoM by SW360's new features
summary
SW360’s new features add SPDX-based SBoM support and a way to manage OSS license obligations: users can register, import, and export component and license metadata in SPDX (ISO/IEC 5962:2021) format, and import machine-readable license obligation summaries from the OSADL website into SW360. The tools are presented as aiding compliance with OpenChain (ISO/IEC 5230) SBoM and license-obligation requirements; some features shown may still be under development.
AI-written summary · about
related talks
13mSW360 SBOM and License Obligation Management
53mAdvancing Transparency and Security in Software: A Deep Dive into SBOM and SPDX
37mSBOM Implementation Reality: From Crawl to Walk - SPDX Lite Pro...
23mSBOM adopatability in open source software scanning
37mStreamlining Open-Source License Compliance With the Continuous Clearing Tool
25mOpen Source Compliance
34mCentralized Approach To Implement OSS Compliance Program for Various Software Products
42mBoF: State of SBOM Tools