This is the FAQ for the OpenChain specification. We highly recommend all contributors to specification’s development review these questions and answers as a first step to contributing. There are four principles that guide the development of the specification:

  1. Build trust around the use of open source in constructing Modern Software Solutions.
  2. Less is More
    • Avoid boiling the ocean – Focus specifically on providing the necessary and sufficient requirements of a “quality” compliance program
    • Focus on meaningful pain points based on actual practice use cases
  3. Focus of the what and why (avoid the how and when)
    • Embrace the implementation of different practices to solve a given requirement
    • Avoid providing specific legal advice or specific best practices
  4. Function as an open development initiative – open to all to contribute – inclusion via discussion and consensus that adhere to these guiding principles

What is the objective of OpenChain Conformance?

OpenChain Self-Certification is designed to assess the status of OpenChain Conformance in relation to a specific version of the OpenChain Specification. Organizations of any size can accomplish Self-Certification through the OpenChain Project Online Self-Certification Web App. A company that completes the Online Self-Certification confirms they meet the OpenChain Specification requirements.

Where can I access the OpenChain Online Self-Certification?

Where can I get help with OpenChain Self-Certification?

Follow the Getting Started instructions on the OpenChain Self Certification page.

Can I change my submission?

You will see an Unsubmit button at the bottom of the page after signing in to the Online Self-Certification site. Clicking this button will cancel your previous OpenChain Self-Certification submission. You can then re-submit the conformance check.

What is meant by Artifacts?

Artifacts are a tangible by-product of implementing OpenChain conformance policies. These can include digital documents, websites or paper documents public or private. All Artifacts should be verified internally by the organization using them.

What if I don’t agree with a submission made by another organization?

Email openchain-conformance@linux-foundation.com with the name of the organization you are concerned about and the reason you disagree with their submission. You should expect a response within 4 weeks.

What response time should I expect to a submittal request?

If all information is correct, the submittal will automatically be approved by the system. Any omissions or incorrect answers will be reported by the user.

How do I report issues with the Online Self-Certification Web App?

Email openchain-conformance@linux-foundation.com with any issues. Please include specific information on the issue you have encountered.

How can I contribute?

Visit the OpenChain Community website for information on how to join and contribute.

Copyright © 2018 Linux Foundation. The OpenChain Specification and OpenChain Conformance guides are licensed under the Creative Commons Attribution License 4.0 (CC-BY-4.0). The Online Certification Questionnaire is available under the Apache 2.0 license on Github. All OpenChain Curriculum, Case Study and other reference material is provided under the Creative Commons Public Domain 1.0 License.