We support our community with extensive reference material. You can see how other companies train their staff, form policies and educate their suppliers. We have training course, case studies, policy templates, checklists, flowcharts and so much more. A lot of it is available in several languages. The majority of the material is under CC-0 licensing, effectively public domain.


In our first online training course, we collaborated with LF Training to explain the basics of open source license compliance management. This is the first step into understand governance from this perspective:

In our second training course, we worked with LF Training to dig deeper into the implementation of open source license compliance management. This helps developers, coordinators and managers go from “what” to “how”:



Get Content for Training Slides or Handouts:
We have prepared extensive written material as a document that can be quickly split into slides or handouts for training courses:

Get a Template for Open Source Policies:
We have developed a template that allows you to create a reference open source policy based on modular building blocks. It can be used by any organization for any open source management, not only for adopting our standards:

Get Capability / Maturity Modeling:
We have developed a capability model to help companies “level up” their use of OpenChain standards. Our mental model of the ideal adoption cycle is to start as simple and a small as possible, and scale over time. This kaizen approach of continual improvement allows organizations to get things done without large resource costs:



Get A Supplier Education Guide:
We have developed a template that allows you to create a reference open source policy based on modular building blocks. It can be used by any organization for any open source management, not only for adopting our standards:

Get SBOM Quality Guidance:
We have developed guides to help with assessing whether Software Bill of Materials (SBOMs) in a supply chain have high enough quality to be useful. Our work started in the Telco Industry and is expanding from there:



Read Practical Case Studies:
We have published case studies in collaboration with our community that show why, how and when various organizations in various sectors adoption and use our standards:

Learn Even More Through Our Webinar Series:
We have published over 100 webinars on topics related to open source management and governance. These cover issues directly related to the adoption of our standards as well as topics more broadly covering industry, government and non-profit concerns about effective, sustainable use of open source software:

1,500+ Documents in the Reference Library:
The full Reference Library contains over 1,500 documents in multiple languages. It has been created over 9 years with the contributions and collaboration of hundreds of people. You will find resources directly related to implementing OpenChain standards as well as material more broadly to applicable to all aspects of open source business process management:



Find Even More Resources With Our Colleagues:

The Linux Foundation and our sister projects have published resources to help with all aspects of open source risk management in the supply chain. A great starting point can be found on the “portal” page showing how projects like OpenChain, SPDX, CHAOSS, OpenSSF and TODO Group contribute to more effective and more sustainable open source use.

