Description
The European Cyber Resilience Act (CRA) establishes a distinct regulatory category for "Open-Source Software Stewards," balancing legal accountability with the collaborative nature of open-source development. However, bridging legal requirements and continuous software engineering remains a massive hurdle, particularly for SMEs and foundation projects.
In this 40-minute technical session, SECURE invites the EU-funded OCCTET project to break down the legal obligations of open-source stewardship under the CRA and demonstrate how to automate compliance. Attendees will see how the ORT Server (OSS Review Toolkit) and the OCCTET toolchain (powered by Eclipse Apoapsis) streamline dependency analysis, generate production-grade Software Bills of Materials (SBOMs), and lay the groundwork for automated Vulnerability Exploitability eXchange (VEX) workflows without manual overhead.
Registration
Sign up now to secure your place. This Training is part of the SECURE Invites Series. The recording will become available on the SECURE Central Repository.
