Thanks to some great community work with OWASP CycloneDX SBOM/xBOM Standard, and esp. the contributions done by Alexander Alzate, several bugs in CycloneDX's Java library version 9.0.x were fixed in short time, allowing the integration in ORT to pass ORT's test suite. As a result, we're happy to announce that today's ORT release 22.6.0 comes with full CycloneDX 1.6 support (although format version 1.5 is still written out by default, until there is wider adoption for version 1.6). Enjoy the new ORT release: https://lnkd.in/gtFnjX4h
OSS Review Toolkit
Technology, Information and Internet
A FOSS policy automation and orchestration tool to manage open source in a strategic, safe and efficient manner
About us
ORT is a FOSS policy automation and orchestration toolkit which you can use to manage open source in a strategic, safe and efficient manner. You can use it to: - Generate CycloneDX, SPDX SBOMs or custom FOSS attribution docs for your software project - Automate your FOSS policy using risk-based Policy as Code to do licensing, security vulnerability checks, InnerSource and engineering standards checks for your software project and its dependencies - Create a source code archive for your software project and its dependencies to comply with certain licenses or have your own copy as nothing on the internet is forever - Correct package metadata or licensing findings yourself, using InnerSource or with the help of the FOSS community
- Website
-
https://oss-review-toolkit.org/
External link for OSS Review Toolkit
- Industry
- Technology, Information and Internet
- Company size
- 2-10 employees
- Headquarters
- Berlin
- Type
- Nonprofit
- Founded
- 2017
Locations
-
Primary
Get directions
Berlin, DE
Updates
-
The ORT Community Days are a wrap, and all slides are available now for download at https://lnkd.in/ekPaKxqK. Thanks to everyone who made this such a great event, first and foremost our speakers, the organizing team, and our generous hosts at Bosch Digital!
ORT Community Days 2024
github.com
-
Big thanks to our friends at Bosch Digital for their continued contributions to the ORT ecosystem (see https://lnkd.in/ezwQDHaW), and esp. the creation of the ORT Server as part of Eclipse Apoapsis (see https://lnkd.in/eudfZRYK)!
🌟 Exciting News Alert! 🌟 Ever wondered what #OpenSource is all about? 🤔 At Bosch it’s not just a buzzword – it's a philosophy we incorporate in our culture, our values, and our innovation. We're proud to be active participants in this community-driven approach, where transparency, innovation, and knowledge sharing reign supreme. 💡 To take our commitment to open source to the next level, we're thrilled to announce the launch of our brand-new open source website! Serving as the official platform of the Open Source Program Office, this website is your one-stop-shop for all things open source at Bosch. 🚀 🎉 Here's what you can expect: 🔹 Deep dive into the principles of the Bosch #OSS program 🔹 Fascinating stories about our OSS activities 🔹 Links to our featured OSS projects 🔹 Stay updated on upcoming events and initiatives And this is just the beginning! We're dedicated to fostering a thriving open source ecosystem, and we can't wait to embark on this journey with you. 💪 Check out our new website and join us in shaping the future of open source together! 💻✨
Home
opensource.bosch.com
-
OSS Review Toolkit reposted this
At this year's ORT Community Days at the Bosch IoT Campus on 6 March, I had the opportunity to present the use of the OSS Review Toolkit (ORT) at Volkswagen. Correct and complete data is a fundamental part of Open Source Clearing in software development. In my presentation I showed how we have developed a curated database of copyrights and licences for software components, using the OSS Review Toolkit as a data pipeline and allowing curators to check for correct and complete data via a rich web front-end. This is a huge relief to the software development teams and allows us to do the OSS clearance process much more quickly.
-
-
OSS Review Toolkit reposted this
ClearlyDefined at the ORT Community Days, the annual event organized by the OSS Review Toolkit community. ORT is an Open Source suite of tools to automate software compliance checks.
ClearlyDefined at the ORT Community Days
https://opensource.org
-
Want to learn how you can automate your organization's #opensource policy? Join us at the #ORTCommunityDays (https://lnkd.in/ekPaKxqK) this March 6 & 7 in #Berlin - we still have a few seats available. Several of our community members will also be present at FOSS Backstage in case 6 & 7 don't work for you.
-
OSS Review Toolkit reposted this
We are happy to announce that the preliminary schedule for the upcoming #ORTCommunityDays is now live at https://lnkd.in/ekPaKxqK. Some of our speakers include: - Martin Nonnenmacher & Vladimir Slavov 🇪🇺 will give talks their work on ORT within Bosch Digital - Philippe Ombredanne will share updates on many of his amazing tools such as #ScanCode & #VulnerableCode - Sebastian Schuberth will talk about the Double Open Server for ORT - Petteri Kivimäki will speak how he used ORT to automate open source license compliance for the #xroad project If you are interested in OSS Review Toolkit, automating #opensource policy or #SBOM then this is the event for you. We still have a few seats available, see our event page to learn how you can sign up
ORT Community Days 2024
github.com
-
We are happy to announce that the preliminary schedule for the upcoming #ORTCommunityDays is now live at https://lnkd.in/ekPaKxqK. Some of our speakers include: - Martin Nonnenmacher & Vladimir Slavov 🇪🇺 will give talks their work on ORT within Bosch Digital - Philippe Ombredanne will share updates on many of his amazing tools such as #ScanCode & #VulnerableCode - Sebastian Schuberth will talk about the Double Open Server for ORT - Petteri Kivimäki will speak how he used ORT to automate open source license compliance for the #xroad project If you are interested in OSS Review Toolkit, automating #opensource policy or #SBOM then this is the event for you. We still have a few seats available, see our event page to learn how you can sign up
ORT Community Days 2024
github.com
-
Martin Nonnenmacher something for the ORT Server logo?
You're an open source maintainer and need help with your project? At this year's FOSS Backstage, take the opportunity to chat with Marit Brademann & Elio Qoshi during the Usability Clinic on Tuesday, where they offer free design support for your project, including UI, UX and user research! https://lnkd.in/d67ANNrz
-
Very good read on the complexity of creating the "right" type of #SBOM: https://lnkd.in/ecF92QQB. This is one of the reasons why ORT analyzes the application context (the "project" in ORT-speak), leveraging the original package manager programmatically, instead of parsing package manager files statically, or re-implementing the resolution algorithm, or assuming that NPM would resolve the same dependencies as e.g. Yarn does.
One set of requirements, zillions of SBOMs
blog.deps.dev