OpenChain provides standards for open source license compliance programs and security assurance in the supply chain. The project involves a global community collaborating to enhance open source processes.

OpenChain

OpenChain Project | 1,695 followers on LinkedIn. Maintaining The Standards for Open Source License Compliance and Security Assurance - ISO/IEC 5230 and ISO/IEC 18974 | We maintain OpenChain ISO/IEC 5230, the international standard for open source license compliance programs, and OpenChain ISO/IEC 18974, the industry standard for open source security assurance programs. 

Our vision is a supply chain where open source is delivered with trusted and consistent process management information. Our mission is to make that happen.

Director Open Source Policy - Ericsson Open Source Program Office - CTO Office.

Jimmy Ahlberg

Japan Evangelist of The Linux Foundation, Group Manager of TOYOTA OSPO and Value Chain Innovation Project of Toyota, Automotive Chair and Board…

Masato Endo

OpenChain Project

What does a work group agenda look like? Here is an example from a virtual meeting in Germany during 2023. Nicely recorded and open to everyone, it contained briefings on everything from process management, GPL licensing, automation and SBOM. Join us: https://hubs.ly/Q02VqVYD0

Masato Endo has long been a thought-leader in the field of open source management. His work as the Chair of the OpenChain Project Automotive Work Group has fostered new communication across continents, and his role as an OpenChain Governing Board member has been vital in helping shape long-term strategy around the international standards for open source license compliance and security assurance. It is great to see his new work in sharing knowledge and experience around OSPOs in the automotive domain. We look forward to supporting this work wherever possible. Thank you also to Dan Cauchy and all the team at Automotive Grade Linux for their tireless development of excellent community to support open innovation in this field!

For three decades we have been refining the management of open source software. Since 2016, the OpenChain Project has been specially focused on process management for compliance matters. Our goal is simple: a more trusted open source software supply chain. We started with ISO/IEC 5230, the international standard for open source license compliance. We continued with ISO/IEC 18974, the international standard for open source security assurance. We are now: ✅ Examing what future updates to our standards can track market evolution ✅ Exploring new topics like AI Compliance and AI Bill of Materials management ✅ Collecting, refining and sharing improved reference material around *how* to use Software Bill of Materials (SBOM) in the supply chain ✅ Developing guides around *what* is a quality SBOM in the context of supply chain deliverables At the InnerSource Commons Foundation ’s InnerSource Summit we will explain how this applies to internal supply chains just as much as external ones. Join Shane Coughlan to learn more.

One of the coolest gifts in the OpenChain Project community: David Liu at ByteDance created a 3D printed dragon and egg. It was presented to Shane Coughlan , OpenChain General Manager, at the first regular OpenChain China Work Group meeting this year ☺️❤️

The OpenChain Project has been collaborating with OpenForum Europe (OFE) on briefings and information-sharing around the EU Cyber Resiliency Act, the AI Act and the Product Liability Directive. The work of this European thinktank has been an invaluable bridge between European policy and regulations and the open source community for decades. The OpenForum Academy was initially coordinated by Shane Coughlan , the OpenChain General Manager, during an earlier phase of his career, and he maintains a seat on the OFE Management Board and General Assembly. As Sachiko Muto said, it has come a long way since its earliest days and events. The proceedings from the first event can be found here: https://lnkd.in/gXusN6-z The first two books by the academy are: Thoughts on Open Innovation (2013) https://lnkd.in/gnDbMYbA Research on Open Innovation (2014) https://lnkd.in/gbwrnW3K Building bridges, sharing information and fostering community is key to ensuring open innovation is accessible, usable and sustainable for all. By the way, Astor Nummelin Carlberg , Ciarán O'Riordan and Sivan Pätsch - it seems the above publications are not discoverable on the current OFE website. They must have been lost in an edit cycle, and it would perhaps be good to ensure the free digital versions (as opposed to the Amazon / LuLu print versions) are available for all.

REMINDER: The OpenChain Project is running a 6 month Public Comment Period for proposed updates to ISO/IEC 5230:2020 (open source license compliance) and ISO/IEC 18974:2023 (open source security assurance). Starting 2024-06-19 ~ Ending 2024-12-19: https://hubs.la/Q02CztwV0

“I have questions about OpenChain Project and the standards you maintain. Where do I…” Here 👇 https://lnkd.in/g8w_3kPt And we are on stand-by to answer any more questions that come up. ISO/IEC 5230 (license compliance) and ISO/IEC 18974 (security assurance) are part of the fabric of open source management. We want to make it as easy as possible for you to adopt them ☺️

We look forward to seeing you there! ☺️ The recent news about Hitachi starting an OSPO, and the communication around this in Japanese and English, has been a great development. I’m sure many people want to learn more. For those who missed it, you can find out more here: https://lnkd.in/gXbk5WHB Ayumi WATANABE at Hitachi is chair of the OpenChain Project Japan Planning Sub-Group, and also sits on the OpenChain Governing Board 👍

We collaborated with OpenForum Europe (OFE) on the OpenChain Policy Briefing Series: EU Cyber Resilience Act, AI Act and the Product Liability Directive. Learn more about European policy that impacts open source, business processes and risk management. https://hubs.la/Q02CzwB90

OpenChain Project @ The Linux Foundation Member Summit If you are going to the LF Member Summit and would like to chat about ISO/IEC 5230 (license compliance), ISO/IEC 18974 (security assurance), our AI, automation, automotive, education or SBOM study groups… or anything else we do… Count us in ☺️ Shane Coughlan , OpenChain General Manager Jimmy Ahlberg , OpenChain Chair Matthew Crawford and David Marr , OpenChain AI Study Group Co-Chairs Norio Kobota , SBOM Study Group Chair and many other board members will be present Shane is your general contact, Jimmy is the boss 😉 Kobota San also runs the Onsen Study Group. Long story… 😅

OPEN

ORG:OPENCHAINPROJECT

OpenChain