Eclipse Oscano

The Eclipse Oscano project provides a complete software composition analysis solution, focused on compliance and security, that can be installed on cloud, local server, or workstation environment. 

To achieve this, existing OSS components will be reviewed by the project team for possible integration into the Oscano stack. Capabilities not existing as OSS will be built and integrated. Oscano project scope:

• Creation of an installable open source software distribution providing a solution for large-scale continuous software composition analysis for use cases like open source inventory management, license compliance and vulnerability remediation automation

• An architecture integrating existing open source SCA technologies and providing interfaces for legacy and vendor SCA systems.

• An industry coordination forum to ensure sufficient and coherent investment into SCA technology projects and to agree about the architecture

• Communication and promotion of the Oscano solution