SEAPATH: A LF Energy Project for Critical Infrastructure with an...
summary
SEAPATH virtualizes electrical substations to run multi-vendor VMs and aggregates third‑party OSS into a Debian flavor and a Yocto flavor, with Yocto builds producing SPDX SBOMs at each build and a Yocto tool that checks CVE status. Project metrics: Early Adoption in April 2023, 781% increase in contributors across ~20 repositories and ~2,000 participants, OpenSSF Silver badge. CI runs in two locations, performs ~700 tests including flashing on real hardware. Key gaps: CPE mapping, interoperable VEX/Vulnerability status, and SBOM tooling integration (SPDX vs CycloneDX, Dependency‑Track).
AI-written summary · about
chapters (11)
- 0:00SEAPATH and LF Energy intro
- 3:17What is a substation
- 6:24SEAPATH architecture
- 10:41Yocto vs Debian in SEAPATH
- 13:45SEAPATH testing and security
- 18:57CVE tracking and management
- 23:54Generating SBOMs
- 26:28Integrating SBOMs
- 28:55SBOM compliance rules
- 31:49Why SBOM matters
- 35:04Q&A
related talks
36mSEAPATH: A LF Energy Project for Critical Infrastructure with an Emphasis on Software Supply Chain Security
32mSEAPATH: What's New - Recent Improvements and Future Developments
14mLightning Talk: LF Energy SEAPATH: Building an Open Source Ecosystem for the...
32mImplementing and Validating Linux Cyber Security Requirements: SEAPATH, a Case Study
38mSEAPATH: Configuring and Testing an Industrial-Grade Linux Platform for Critical Real-Time Applications in the Energy Sector
37mSBOM & Vulnerabilities in SEAPATH
30mDigital Sovereignty and Grid Resilience: The Strategic Role of LF Energy and...
22mKeynote: LF Energy: An Innovative Ecosystem Powering the Future of Energy Through Ope...