THE LINUX FOUNDATION PROJECTS
All Posts By

Shane Coughlan

Shane Coughlan is an expert in communication, security and business development. His professional accomplishments include spearheading the licensing team that elevated Open Invention Network into the largest patent non-aggression community in history, establishing the leading professional network of Open Source legal experts and aligning stakeholders to launch both the first law journal and the first law book dedicated to Open Source. Shane has extensive knowledge of Open Source governance, internal process development, supply chain management and community building. His experience includes engagement with the enterprise, embedded, mobile and automotive industries.

OpenChain Reference Tooling Work Group – Minutes of the March 25th Meeting

By News

1. News
Oliver informed all that Haksung created an overview about sw360 in Korean language.
Further Oliver created a new branch “containers” in our Github repo and provided there the material shown in the last meetings. The idea is to collect all material about containers and license compliance in the directory “Container-License-Compliance”, once having good content available Oliver wants to reach out to Shane and ask him whether is would be possible to generate an official OpenChain “container compliance leaflet”.

Alexios shared that the development of SPDX-3.0 has started. SPDX-3.0 will support different profiles which will implement different use cases. Now there is a good opportunity to introduce changes to the SPDX standard, which break backward compatibility, since the version 3.0 will not be backward compatible with the previous versions. He also said if there are requirements towards the specification from our side, we are warmly welcome to contribute them. The new version will contain examples how it shall be used.
The Github repos of SPDX specification can be found here: https://github.com/spdx/spdx-spec

2. License compliant containers:
Oliver presented the content of the branch and the directory https://github.com/zvr/Sharing-creates-value/tree/containers/Container-License-Compliance . There was the comment that we shall also provide a “Q&A” on which tools shall be used in order to achieve the best practices. Further is was suggested to provide also a description of the desired results  and provide concrete examples.

3. New features in sw360
Michael presented the new features implemented in sw360. There will be changelog functionality in order to verify who changed what. Sw360 is able to “read” SPDX Boms and to generate the corresponding data. He asked for support in further testing this feature because there are many different scenarios, which have to be covered. The integration of sw360 with FOSSology via REST API is improved and FOSSology scans can be triggered automatically.
There was the question whether sw360 is able to generate the “OSS disclosure document” – yes it is possible to generate the OSS disclosure document with sw360. There are two options available to do that – either via REST API or via GUI. The same applies to the generation of the source code bundle.

4. Next steps:
Next meeting will be at 8th of April the invitation was sent to the mailing list
Proposed Agenda Item: continue on best practices for container compliance

Review The Slides Presented

https://www.slideshare.net/ShaneCoughlan3/12th-meeting-openchain-reference-tooling-work-group-25th-march-slides 

OpenChain Korea Work Group Meeting # 5 – Video Minutes – 19th March

By News

The full video minutes of our most recent OpenChain Korea Work Group meeting are now available. This was a virtual meeting due to the COVID-19 situation. Great thanks to all involved in hosting the event and preparing this video! Special thanks to Haksung Jang @ SK Telecom and Seo Yeon Lee @ LINE for getting these post event reports together.

Keep Up With The Korean Work Group

Join The Korean Mailing List

ようこそOpenChain Japan WGへ!

By Featured

はじめに

こんにちは。あるいは、はじめまして。
OpenChain Japan WGのアドベントカレンダーへようこそ!
私たちOpenChain Japan WGは、OSS(Open Source Software)のコンプライアンスに関する活動をしている日本のコミュニティです。
これから25日間にわたって、コミュニティのみんなでたくさんのことをお伝えしていきたいと思います。このアドベントカレンダーを通して、私たちの活動やOSSコンプライアンスの重要性について知っていただくとともに、コミュニティのメンバーについても知っていただき、参加したいなと思っていただけるようになれば幸いです。
どうぞよろしくお願いします。

自己紹介

アドベントカレンダーのトップバッターを務めさせていただきます渡邊歩です。OSSの活用に関するコンサルテーションを生業としています。
好きなライセンスは、Beerware Licenseです。
OSSコンプライアンスについては8年ほどのキャリアになりますが、OSS管理のベストなやり方を提案し、お客様と一緒にOSS管理のプロセスを作りあげていくお仕事をしています。

OpenChainについて

OpenChainは、Linux Foundationの公式プロジェクトのひとつで、OSSのライセンスコンプライアンスプログラムを組織が構築するための指針を整備しているプロジェクトです。OpenChainは、ソフトウェアのサプライチェーンの中で活動する人々が各組織内に確立すべきコンプライアンスプログラムの要件を、OpenChain仕様として定義し、各組織がそれらを確立するための支援を行っています。

Japan WGについて

OpenChain Japan WGは、日本で活動するOpenChainのワーキンググループで、日本企業ならではの課題や解決策について議論や情報交換を行っています。Japan WGの中には更にPlannning, Tooling, Promotion, FAQ, リーフレット, 教育資料, ライセンス情報など、たくさんのサブワークグループがあり、それぞれが活発に活動しています。このアドベントカレンダーでは、それぞれのサブワークグループのリーダーによる活動報告もありますのでお楽しみに!

我々のまとめ役、Shaneさん

OpenChainのゼネラルマネージャーのShane Coughlanさんは、我々のまとめ役として、我々の活動をいつも、温かく応援してくれています。
Shaneさんからのコメントを紹介します!

The OpenChain Project defines the industry standard for open source compliance. It identifies the inflection points where a process, or a policy, or a training program should exist. At a high level, it takes the knowledge of thousands of people from hundreds of companies in this space, and it condenses it into clear, unambiguous definitions that any company in any market can adopt.

The OpenChain industry standard does not dictate the content of each process, policy or training program because it needs to be applicable to companies of all sizes in all markets. However, we have a super active and supportive community. There is reference material of all sorts – including entire reference training programs or multi-industry policy options – accessible via our website.

Indeed, the community of the OpenChain Project is our most valuable asset. We have local work groups in China, India, Japan, Korea and Taiwan. We have global mailing lists for the project as a whole, for automated tooling, for automotive. There is an incredible amount of energy and passion around collaboration in this space. We are all learning, and improving, due to this.

The OpenChain Japan Work Group holds a special place in my heart. It was our first local work group and it is our largest, most successful local community activity. People from so many companies and situations join together, share their thoughts, and collaborate to make things better. It captures the heart of open source. I hope that you can experience some of this during our 25 day advent calendar.

(日本語訳)
OpenChainプロジェクトは、オープンソースコンプライアンスを実施するために必要な業界標準を定義しています。この業界標準は、組織にオープンソースコンプライアンスが定着することを、プロセス、ポリシー、トレーニングプログラムが存在することと定義しています。高いレベルで、この分野の数百の企業の数千の人々の知識を、明確で不明瞭さのない定義へと凝縮させています。このため、この定義はあらゆる市場の企業に適用できるものになっています。

OpenChain業界標準は、すべての市場のあらゆる規模の企業に適用できる必要があるため、プロセス、ポリシー、トレーニングプログラムの具体的な内容には触れません。しかしながら、我々には非常に活発で協力的なコミュニティがあり、有益な情報を相互に共有することができます。あらゆる種類の参考資料(網羅的なトレーニングプログラムや複数業種に適用できるポリシーなど)を、我々のWebサイトから入手することができます。

OpenChainプロジェクトのコミュニティは、まさに我々の最も貴重な財産とも言えるものでしょう。中国、インド、日本、韓国、台湾などにローカルワークグループがあります。また、OpenChain全体(グローバル)のメーリングリスト(ML)にも、プロジェクト全体のML、コンプライアンスの自動化ツールのML、自動車分野のMLが存在しています。各地域のワーキンググループや各トピックのメーリングリストを通じて行われるコラボレーションには、信じられないほどのエネルギーと情熱があります。このような「熱い」コラボレーションにより、私たちは皆、これにより新たな気付きを得、自ら改善することができるのです。

OpenChain Japan WGは私にとって特別なものです。我々OpenChainにとって初のローカルワークグループであり、かつ最も大きくかつ成功しているローカルコミュニティでもあります。多様な企業、異なる状況にあるメンバーが一緒に活動し、意見を交換しながらより良いものを目指して協力しています。これはオープンソースの精神そのものであると思います。このアドベントカレンダーの読者の方が25日間を通して我々の活動を体感していただければ嬉しく思います。

明日のテーマは・・・

明日のテーマは「Planningサブワークグループの紹介」です。
担当は、いつもワーキングの色々なタスクを率先してやって下さる、とっても優しい今田さんです。
では明日の記事をお楽しみに!!

来週:

OpenChain プロジェクトおよび OpenChain Japan WG のご紹介

OpenChain Reference Tooling Work Group – Activity Epics

By Featured

Legal Assessor Epic

A legal assessor might be a lawyer or a special trained person who cares about licenses which apply to applications that include OSS and/or other third party software.

Explore Their Epic

Software Architect Epic

This epic describes briefly the role, responsibilities, tasks and how the software architect interacts with the toolchain in order to accomplish his tasks in an efficient way.

Explore Their Epic

Software Developer Epic

This epic describes briefly the role, responsibilities, tasks and how the software developer interacts with the toolchain in order to accomplish his tasks in an efficient way.

Explore Their Epic

Compliance Assistant Epic

This epic describes briefly the role, responsibilities, tasks and how the compliance assistant interacts with the toolchain in order to accomplish his tasks in an efficient way.

Explore Their Epic

ECC Expert Epic

A ECC expert (export control and customs) might be a lawyer or a special trained person in export control regulations who cares about all export control classifications for applications which are delivered that include OSS and/or other third party software.

Explore Their Epic

Explore More Epics

The Work Group has created a range of further epics or use cases. These are living documents and your contribution is welcome alongside your use.

Get this guide and many more documents in the OpenChain Reference Library: https://github.com/OpenChain-Project/Reference-Material

OpenChain Japan Work Group: Republishing the Advent Calendar

By News

During the December 2019 period the OpenChain Japan Work Group ran a series of articles covering OpenChain, their work, and what it means to companies. We will be republishing this calendar in Japanese on the main OpenChain blog over the coming weeks, and we hope to share some English translations after that.

Check Out The First Article

If you want to skip ahead, you can see the whole series here:

OpenChain Newsletter #35

By Monthly Newsletter, News

Newsletter – Issue 35 – March 2020

OpenChain Japan Work Group: Republishing the Advent Calendar

During the December 2019 period the OpenChain Japan Work Group ran a series of articles covering OpenChain, their work, and what it means to companies. We will be republishing this calendar in Japanese on the main OpenChain blog over the coming weeks, and we hope to share some English translations after that.

Check Out The First Article

If you want to skip ahead, you can see the whole series here:


OpenChain @ Translations

OpenChain @ GitHub

  • The OpenChain Project has a substantial presence on GitHub. We use our space to store core documents like the project charter and specification, our growing library of reference material under CC-0 licensing, and other material like our project image assets. This allows our global community to quickly access, share and improve all aspects of our work. Find out more:
    https://www.openchainproject.org/news/2020/03/23/openchain-on-github-march-2020

OpenChain @ Conformance

OpenChain @ Partners

OpenChain @ Work Groups

OpenChain @ Events

OpenChain @ In The News

MOXA ♥ OpenChain – The News in Chinese and Korean

By Featured

The recent news regarding MOXA’s decision to become an OpenChain Platinum Member has spread through Chinese and Korean language media. Naturally these are very important geographic and linguistic areas for us. We hope these stories will be useful for our community in discussions inside companies, with other companies, and with the broader technology community.

DigiTimes (Traditional Chinese)

Control Engineering China (Simplified Chinese)

ICN Web (Korean)

Webinar with GTC Law and FOSSID – Open Source Software and Code Snippets

By News

GTC Law and FOSSID, two official partners of the OpenChain Project, will host a webinar on March 26th 2020 at 9:30 am EST that covers open source software and code snippets: the benefits, the pratfalls, and how to use FOSSID tools to manage compliance and mitigate risks.

This webinar will dive into OpenChain and will explain the value proposition for businesses leveraging open source software in products or services.

Learn More

Register