Open Source SCA

on YouTube ↗31m

" summary

Open source SCA platform provides a free public knowledge base (osskb.org) and commercial data subscriptions, plus Python and JavaScript CLIs, a multi‑platform GUI and SBOM export to SPDX/CycloneDX, all working now and integrated by tools like ORT and FOSOLOGY. Detection is stateless and anonymous via an API, no auth required, and the index claims 146 million urls and 100 billion files totaling 3 trillion lines of code. A blockchain proof‑of‑concept (esbom.info) links and validates SBOMs.

AI-written summary · about

" chapters (6)

1. 0:00Open Source SCA intro
2. 2:07Scanner SCA disruption
3. 7:49Ecosystem growth
4. 13:22Software Transparency launch
5. 21:28Business model
6. 28:10Trust in sources

" related talks

• 51mThe SBOM Era: Leaving No Open Source Project Behind With Osskb.orgAgustin Benito Bethencourt, Oscar Enrique Goñi · Open Source Summit Europe 2025
• 48mA Journey to Open DataJulian Coccia · foss-north 2024
• 23mSBOM adopatability in open source software scanningAnitha Dakamarri · Commit Your Code 2025
• 38mOpen Source Licensing in the Era of AI-Assisted CodingJulian Coccia · EclipseCon 2023
• 43mUsing SBOMs for Linux Foundation ProjectsJeff Shapiro, Gary O'Neall · Open Source Summit North America 2025
• 35mTransforming SBOMs from Compliance Burden to Security AssetMartin Sikora, Ales Raszka · DevConf.CZ 2026
• 30mContinuous Compliance in Open Source: Safety Assurance Through S...Rinat Shagisultanov, Troy Sabin · Open Source Summit North America 2025
• 35mOSCAR - Automate software analysis, compliance and securityStefan Just · EclipseCon Europe 2018