7 projects
Tern
Tern is a Linux Foundation project focused on open source software supply chain security, providing tools for analyzing and managing dependencies in containerized applications to enhance transparency and compliance.
78
2
Decoder Ring
Decoder Ring is a Linux Foundation project focused on developing cryptographic tools and libraries to enhance security and privacy in open-source software systems through standardized encryption and decryption protocols.
67
1
Quartermaster (QMSTR)
Quartermaster (QMSTR) is a Linux Foundation project focused on open-source software compliance tooling, automating the documentation and verification of license obligations and dependencies throughout the software supply chain.
7
1
OSS Review Toolkit (ORT)
ORT is a Linux Foundation toolkit that automates the review and compliance verification of open-source software dependencies, helping developers identify licensing issues, security vulnerabilities, and ensure policy adherence throughout the software supply chain.
6
1
Fossology
Fossology is a Linux Foundation project that provides an open-source license compliance software system. It helps organizations scan, analyze, and manage software licenses and copyrights in their codebase to ensure compliance with licensing requirements.
4
1
SPDX Tools
SPDX Tools is a Linux Foundation project that provides utilities for creating, validating, and exchanging Software Package Data Exchange (SPDX) files, enabling standardized sharing of software license and component information across the supply chain.
1
1
Automated Compliance Tooling (ACT)
Automated Compliance Tooling (ACT) is a Linux Foundation project that develops automated solutions to streamline regulatory compliance processes, reducing manual effort and improving accuracy for organizations managing complex compliance requirements.