Eclipse Oniro compliance toolchain
summary
Oniro is a multi‑kernel embedded OS built with Yocto/BitBake and comprising thousands of packages; the compliance pipeline integrates GitLab CI, Fossology, ScanCode, SPDX and REUSE and reduces what would be hundreds to thousands of man‑days by importing Debian metadata via alien for friends and Debian matching. A dashboard aggregates results across a 15‑machine build matrix and ~30–40 builds, marks match quality with green/yellow/red, publishes per‑component SPDX SBOMs in a GitLab repo, and plans a public SPDX API.
AI-written summary · about
chapters (4)
related talks
30mEclipse Oniro: A production OS
43mThe Oniro Platform: An Open Source Operating System Platform
50mEclipse Apoapsis - Open Source based Software Composition Analysis at scale
32mOniro: How an Open Source Project can revolutionize IoT market/industry
18mExploration of Compliance Governance Based on Operating Systems
33mORT Automate compliance using Open Source & InnerSource
39mRevising the Eclipse Foundation's Intellectual Property Due Diligence Process
45mOpen Source on Purpose; Strategy, Process and Tools to Succeed
