Leverage Kubernetes SPDX Tools to Create Your SBOM
Explore Kubernetes SPDX tools for efficient SBOM creation, organization, and management. Learn to leverage SPDX features and understand future directions in software bill of materials.
License Compliance and Security Management for Embedded Systems
Explore license compliance and security management for embedded systems, focusing on SBOM implementation, SPDX file generation, and effective problem-solving tools.
Generating a SPDX SBOM for Your Code in CI Using ORT
Learn to generate SPDX Software Bill of Materials (SBOM) for your code in continuous integration using the OSS Review Toolkit (ORT), enhancing software transparency and security.
Composing the Ultimate SBOM - Creating Accurate and Modular Software Bill of Materials
Explore a modular approach to creating accurate Software Bills of Materials (SBOMs) using Micro-SBOMs, enhancing software security and compliance tracking beyond traditional post-build methods.
SBOMs for Embedded Systems - What's Working, What's Not
Explore challenges and successes in implementing Software Bill of Materials (SBOMs) for embedded systems, discussing regulatory impacts, generation methods, and practical applications.
SBOMs, VEX, and Kubernetes - Software Supply Chain Security in Cloud Native Environments
Explore software supply chain security with experts discussing SBOMs, VEX, and their practical applications in Kubernetes environments, from open-source projects to regulated industries.
Securing the Software Supply Chain - SBOMs and Their Impact
Explore software supply chain security, SBOMs, and their impact on open source. Learn about transparency challenges and the potential effects of the Cyber Resilience Act.
Introducing OpenChain Japan Community's SBOM Initiatives
Explore Japan's SBOM initiatives, SPDX 3.0 contributions, and future outlook. Gain insights on software supply chain security, practical SBOM adoption, and global implications for stakeholders.
Eliminating the Unknowns: Using GUAC to Better Understand Your Software Supply Chain
Learn how GUAC, an open-source knowledge graph, aggregates software supply chain metadata to enhance security, inform decision-making, and enable policy-driven admission control in your development lifecycle.
The Evolution of SBOMs in AlmaLinux
Explore AlmaLinux's SBOM generation process, its evolution to meet NTIA requirements, and the implications for RPM-based Linux distributions. Learn about challenges and solutions in software supply chain security.
Practical SBOM Management with Zephyr and SPDX
Learn to identify, assess, and manage software components in Zephyr applications using SBOM standards and tools. Enhance security practices and respond effectively to vulnerabilities in embedded systems.
Eating the Open Source Security Sandwich with Skootrs
Explore Skootrs, an open-source tool simplifying adoption of security practices for software developers through automation and guardrails.
Generating SPDX Software Bill of Materials with Yocto Project
Generate SPDX Software Bill of Materials with Yocto Project. Learn practical details, usage of "create-spdx" class, and control variables for customized SPDX output.
Yocto Project Security: Now and the Future - YPS 2023.11
Explore Yocto Project's 2023 security updates and upcoming 2024 features, including CVE scanning, SBOM generation, and default options.
The Ramifications of ISO 5230 and ISO 18974 for Legal Professionals in 2024
Explore ISO standards' impact on legal professionals in open source licensing and security, covering procurement, M&A, and supply chain management, with insights on future developments and resources.
Open Source Encryption and Export Regulations - The New Compliance Frontier
Explore encryption in open source software, export regulations, and compliance strategies. Learn tools and best practices for identifying encryption and managing export compliance in commercial software solutions.
Leveraging Specifications in Open Source Projects
Explore the role of specifications in open source projects, focusing on licenses, governance, and effective collaboration strategies.
SPDX Generation via Yocto and the New LID Code License Scanner
Explore SPDX generation in Yocto using LiD, a new open-source code scanner. Learn about its advantages, integration, and best practices for license compliance in bitbake recipes.
SW360 SBOM - Managing Vulnerability Information, SPDX Documents and Dependency Networks
Explore SW360's features for managing software components, including vulnerability tracking, SPDX document handling, and dependency network visualization for enhanced license compliance and security.
OpenDataology: Fixing Dataset Licensing for AI - A Call to Arms
Explore OpenDataology's innovative approach to dataset license compliance, addressing challenges in AI software development and proposing solutions for better risk assessment and documentation.
Our Journey to Open Source - From a Conservative Japanese Company
Explore Hitachi Solutions' journey from a conservative Japanese company to launching their first open-source project, "Editor for SBOM," overcoming cultural barriers and embracing innovation.