LinuxCon ContainerCon CloudOpen China

The global supply chain is a key challenge for effective compliance in Open Source. One significant step towards addressing this challenge have been taken by an initiative called OpenChain, which was created to provide Specification, Conformance and Curriculum material for managing Open Source Compliance. This talk will explain how to engage with the OpenChain Project, what benefits it brings in practical terms to commercial entities and how it can be expected to impact the market in the coming year. In a nutshell, OpenChain has the potential to revolutionize how we deal with Open Source in combination with software bills of materials like SPDX and tooling like FOSSology. This is because, taken together, these documents, processes and tools are commodifying the knowledge and methods applied by the largest companies and making them available for even the smallest entities.