Governing Open Source in the Enterprise: OSPO Strategies for Innovation and Compliance
summary
Enterprise OSPO strategies that scale: OSPO adoption is up 32% year over year and Dynatrace documents 30–60,000 open-source components in its SBOM; governance uses a three-step initial review → automated scan → legal review flow where the automated checks often finish in under an hour. Real examples: internal project Captain versus OpenFeature success — Captain struggled to win community trust, OpenFeature becomes a fast-growing CNCF sandbox. Tooling includes Dependabot and Renovate, FASA scans, SIGstore and SLSA for supply chain, plus an open-source contribution dashboard that the company is releasing.
AI-written summary · about
chapters (8)
- 0:00OSPOs and governance
- 1:48Open source in enterprises
- 3:57Consuming, contributing, creating
- 9:22Three OSPO strategies
- 10:03Building open source communities
- 17:14Legal compliance and security
- 23:14Open source in R&D
- 26:53Next steps and culture
related talks
35mOpen Source as a Product: Strategies for Building and Scaling Successful Open Source..
40mHow to Open Source a Project and Possibly Not Fail While Trying- 35mOpen Source as a Product: Strategies for Building and Scaling Successful Open Source..
40mHow Can Your OSPO Drive Open Source Business Value for Your Organization?
26mNavigating Open Source: Establishing an OSPO for Organizational Success
38mPanel: Open Source Management Based on Open Source
20mOpen source in the enterprise
45mOpen Source on Purpose; Strategy, Process and Tools to Succeed