Webinar: Introduction to the Cyber Resilience Act (CRA)
About This Webinar: The European Union (EU) Cyber Resilience Act (CRA) is a new law that covers almost all "products with digital elements", including software, released in the EU. Enforcement will begin in 2026, even on organizations who aren't based in the EU. This presentation explains the scope and requirements…
Webinar: Compliant containers with the OSADL Base Image
About This Webinar: While containers certainly simplify deploying software, fulfilling FOSS license obligations for containers is made difficult by their layered structure and the lack of compliance material in public repositories. Although every container is customized for its particular use and therefore comprises different software components, many are built on…
Webinar: Unlocking Potential – Case Study on ZF’s ISO/IEC 5230 Third-Party Certification with TIMETOACT
The OpenChain Project held a webinar on the 29th of July 2025 to provide a case study on how ZF – one of the world’s largest automotive suppliers – collaborated with TIMETOACT to obtain third-party certification for OpenChain ISO/IEC 5230. Abstract: This case study is suitable for organizations new to…
Webinar – How we are doing compliance at CARIAD with ORT
This webinar covered how the team in VW Group are doing compliance at CARIAD with ORT. Helio Chissini de Castro lead the discussion, and we had some interesting Q&A. This is an outcome webinar from the OpenChain and Friends event in Stuttgart, Germany during April 2025. This event saw speakers…
Webinar – Project OCCTET.eu – The Why, What and How
This webinar covered an interesting new EU-funded project that brings together various open source tooling for open source security and compliance like Open Source Review Toolkit (ORT) and AboutCode, and other experts in the domain of open source compliance, security and automation. It featured Andreas Kotulla (Bitsea) and Martin von…
Webinar – AboutCode – Practical Compliance in One Stack – Licensing, Vulnerabilities, and More
Our speaker was a good friend of the OpenChain Project, and the founder of AboutCode, Philippe Ombredanne. Our focus was on recent advances in the open source and open data AboutCode stack for licensing and security compliance. This is an outcome webinar from the OpenChain and Friends event in Stuttgart,…
Webinar – How big is the risk of using LLM-generated code from the open source license compliance point of view?
Oscar Goñi (Quique) discussed research around LLM generated code and the potential for risks associated with open source license compliance. This event looked at source code similarity detection via open source tooling. Watch the Webinar: https://youtu.be/IlvGsxMvjh0 Abstract: Oscar Goñi (Quique) has investigated source code similarity detection in Large Language Model…
Webinar – First Steps With ORT – An EEF Experience
What We Covered: The OSS Review Toolkit (ORT) is a FOSS policy automation and orchestration toolkit that you can use to manage your (open source) software dependencies in a strategic, safe and efficient manner. This webinar digs into how the Erlang Ecosystem Foundation (EFF) makes use of this tool to…
Webinar: Practical Compliance in One Stack – Licensing, Vulnerabilities, and More
https://youtu.be/MrcfFWcIy6c What We Covered: The Cyber Resiliency Act (CRA) is coming and this European regulation will impact software development worldwide. Organizations (and projects) of all sizes need efficient compliance processes to correctly identify software components and strengthen cybersecurity efforts. The AboutCode stack of 100% open source tools and open data…
Webinar: CHAOSS Practitioner Guides for Healthy & Sustainable OSS Projects
We had an insightful session with Dawn Foster on sustaining OSS projects and communities over the long-term. The CHAOSS project has been creating a series of MIT-licensed Practitioner Guides focused on improving the sustainability of our software and communities. The guides are designed to make it easier for people to…
