Turn CRA Awareness into Action
summary
Octet stitches OSS Review Toolkit and OR server into a federated data layer that stores package facts as text in many git repos and an operational Postgres store, keyed by package URL, with the goal of serving precomputed SBOMs instead of rescanning 80M+ npm versions or 4M Maven artifacts; contributors report 50M+ ScanCode results and ~30B source files processed. A free CRA self‑assessment site (crit.au) adds an Oxy AI agent for guidance, public code lives on GitHub/GitLab.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 3:41OS Review Toolkit overview
- 14:40CRA compliance requirements
- 23:16CRA self-assessment demo
- 28:45Standards in compliance
- 36:46Q&A
related talks
30mORT Server: An open source platform to automate CRA checks
44mSecurity Research with Open Source Software: Vol. Omega
42mMaking EU CRA (Cyber Resilience Act) simplified and non-scary for OSS contributors
42mMaking EU CRA (Cyber Resilience Act) Simplified and Non-scary for OSS Contributors
44mPanel Discussion: Prepare for the CRA: Open Source Governance in the Age of Cyber Resilience
01h 00mDependency Check Project
28mGenerating a SPDX SBOM for Your Code in CI Using ORT
50mEclipse Apoapsis - Open Source based Software Composition Analysis at scale
