SEAPATH: A LF Energy Project for Critical Infrastructure with an Emphasis on Software Supply Chain Security
Talkat Open Source Summit Europe 2023 · on Wednesday, 2023-09-20· at 16:50· Room 0C (Floor 0), Abandoibarra Etorb., 4, 48011 Bilbao, Bizkaia, Spain·
summary
SEAPATH virtualizes electrical-substation functions, bundles third‑party OSS, and already graduates to Early Adoption with 781% increase in contributors and an OpenSSF Silver badge. Two builds run: a Yocto-based custom distro that generates SPDX 2.2 SBOMs at each build and admits source‑patch fixes, and a Debian flavor relying on apt and mailing‑list CVE workflows. CI runs in two sites, flashes real hardware and executes 700 tests covering functional and security checks; virtualization meets protection‑system latency targets but CVE/CPE and SBOM interoperability remain unresolved.
AI-written summary · about
chapters (11)
- 0:00SEAPATH and LF Energy intro
- 3:17What is a substation
- 6:24SEAPATH architecture
- 10:41Yocto vs Debian in SEAPATH
- 13:45SEAPATH testing and security
- 18:57CVE tracking and management
- 23:54Generating SBOMs
- 26:28Integrating SBOMs
- 28:55SBOM compliance rules
- 31:49Why SBOM matters
- 35:04Q&A
related talks
36mSEAPATH: A LF Energy Project for Critical Infrastructure with an...
32mSEAPATH: What's New - Recent Improvements and Future Developments
32mImplementing and Validating Linux Cyber Security Requirements: SEAPATH, a Case Study
38mSEAPATH: Configuring and Testing an Industrial-Grade Linux Platform for Critical Real-Time Applications in the Energy Sector
30mDigital Sovereignty and Grid Resilience: The Strategic Role of LF Energy and...
37mSBOM & Vulnerabilities in SEAPATH
10mOpen Substation: Building an Open Stack for Digital Substations
27mPre-Packaging CRA and NIS2 Compliance: The SEAPATH Approach