OSCAR - Automate software analysis, compliance and security | EclipseCon Europe 2018
EclipseCon Europe 2018
Ludwigsburg, Germany · October 23 - 25, 2018
https://www.eclipsecon.org/europe2018
Speaker(s):
Stefan Just (Codescoop Oy)
https://www.eclipsecon.org/europe2018/sessions/directors-pick-oscar-open-software-composition-analysis-new-eclipse-project
Over the last few years, numerous OSS components have been introduced to address software composition topics like compliance, security, cataloguing, workflows and data transfer, just to name a few. Think of the likes of fossology, ORT, Quartermaster, SW360, ClearlyDefined, ScanCode and others.
Codescoop together with leading enterprises think it is the right time to bundle, combine and enhance these capabilities into a useable, extensible and fundamentally new generation open platform solution that allows development organizations to compose their own state of the art Software Composition Analysis (SCA) environment - independent of existing vendors of commercial point solutions. Enter the Eclipse OSCAR project: The Eclipse OSCAR project will deliver software composition analysis support to the fingertips of development teams. Integrated directly and early in the life cycle of designing and writing software. The objective is to make SCA available in a way similar to key DevOps automation achievements like continuous integration, automated distribution and KPI based reporting. Put into the mix support for a multitude of programming languages, distributed deployment technologies and high scale architectures, then you get the fundamental design objectives of OSCAR.