Software Composition

Automating your license compliance policy with OSS Review Toolkit

D.composition
Thomas Steenbergen
In this session we will demonstrate how to write a license policy in OSS Review Toolkit to automatically check the licenses found in a project and its dependencies. One of the reasons OSS Review Toolkit was started by its creators was a need to go beyond the usual allow/deny license policy in most SCA tools. For instance we wanted to be able to write checks with multiple levels of compliance depending on what was being reviewed or based on package meta data. In this session we will demonstrate how one can write license policy with checks/rules that take into account package metadata date or the code, license and product context.

Additional information

Type devroom

More sessions

2/7/21
Software Composition
D.composition
Welcome to the Software Composition Analysis Devroom
2/7/21
Software Composition
Thomas Steenbergen
D.composition
In this session we will provide an update on OSS Review Toolkit (ORT) - which features have been recently added and what they ORT team is currently working on.
2/7/21
Software Composition
Philippe Ombredanne
D.composition
This is a presentation of the latest features and updates in ScanCode toolkit and its companion projects.
2/7/21
Software Composition
D.composition
FOSSology focusses on license compliance analyses. Recently, a number of new features have been published by the community to integrate better with software composition analysis. The presentation shows an introduction of the main and relevant development here.
2/7/21
Software Composition
Alan Facey
D.composition
Software Composition Analysis (SCA) tools perform source-code analysis, comparison and identification of Open Source components. Sadly, none of the SCA vendors have embraced Open Source themselves, most of their tooling consists of proprietary code and their OSS Knowledge Bases are also closed.
2/7/21
Software Composition
Rose Judge
D.composition
Container and VM images contain many packages and are quite a challenge for composition analysis.
2/7/21
Software Composition
D.composition
The very short time is some placeholder between presentation groups to have questions being asked and answered or just simple to have a break.