Securing Software Supply Chains: OpenCode as Building Block for Sovereign Digital Infrastructure
Talkat Open Source Summit Europe 2025 · on Monday, 2025-08-25· at 11:20· Elicium 2A (Elicium Level 1)·
summary
openCode is a platform that curates public‑sector-ready OSS and runs an automated continuous re‑review pipeline to produce pass/fail batches (maintenance, reuse, open‑source license, security) using tools like GitLab, Open Source Review Toolkit, container scanners, repository metadata and a DEF CVE workflow. 14% of catalog entries show the reuse badge and about half meet the first maintenance level; two security levels are live with security level 3 planned by year‑end. A pilot for hardened base images is underway.
AI-written summary · about
chapters (11)
- 0:00Digital sovereignty in public sector
- 4:17OpenCode for secure supply chains
- 9:57Evolution of supply chain paradigms
- 13:07Batch program for software quality
- 22:17Principles behind batch program
- 27:56Developer tools and batch reporting
- 30:27Certified procedural security vision
- 31:52Cloud and container challenges
- 34:21Pilot for hardened base images
- 36:50European and international collaboration
- 41:35Q&A
related talks
09mSecuring the Software Supply Chain with Open Source
11mSupply Chain Cybersecurity
39mOpen Source Software Supply Chain Security — Why does it matter?
38mSecuring the chains: Building defensive layers for software supply chains
45mSponsored Session: Because Security Matters: Securing Your Open Source Supply Chain
44mSecuring Open Source Software - End-to-End, at Massive Scale, Together
40mPractical guides for enhacing your Software Supply Chain Security
29mSecuring the Unseen: Defending Against Open Source Software Supply Chain Attacks