Open Compliance Summit

This session shows less slides but rather demonstrates the use of open source based compliance tooling - it shows an end-to-end example of how license scanning is combined with component management. As a workshop session, attendees are encouraged to discuss the shown example together with the presenter.

The presentation will use the open source project FOSSology as license scanning and analysis tool. FOSSology consists of several building blocks that can be integrated into a compliance toolchain. And, it can be deployed as a Web server application allowing multiple users for analyzing OSS and sharing results. The presented component management system will be SW360, also an open source project. Organizations can use SW360 for maintaining an inventory of used software components to keep track of a software bill of material and reuse compliance information.