BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//program.foss-backstage.de//fossback23//talk//RZ8L37
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-fossback23-RZ8L37@program.foss-backstage.de
DTSTART;TZID=CET:20230314T151000
DTEND;TZID=CET:20230314T154000
DESCRIPTION:Setting up or maintaining a FOSS compliance processes is not si
 mple as most organizations use a wide variety of programming languages\, c
 ode build tools and delivery methods. Ideally\, you want to automate most 
 of the compliance work but as most Open Source Program Offices (OSPO) have
  found out\, there are often significant gaps between what is offered by m
 ost tools and what you would like to have. Given this\, several OSPOs have
  been collaborating to build OSS Review Toolkit (ORT).\n\nIn this session 
 Thomas demonstrates how one can use ORT to safely use\, integrate\, modify
  and redistribute third party software including FOSS in your software pro
 ject(s). He will show a FOSS review from start to finish e.g. from scannin
 g a repository for packages\, licensing and vulnerabilities to fixing foun
 d issues and generating attribution documents\, source bundles and SBOMs (
 CycloneDX/SPDX).\n\nBy the end of this session you should be able to repli
 cate an ORT-based compliance process within your organization including au
 tomating your FOSS policy using Policy as Code and save process/review tim
 e by using an InnerSource-based review process and re-using FOSS clearance
  artifacts from the community.
DTSTAMP:20260517T025457Z
LOCATION:Stage 2
SUMMARY:ORT: Automate compliance using Open Source & InnerSource - Thomas S
 teenbergen\, Surya Santhi
URL:https://program.foss-backstage.de/fossback23/talk/RZ8L37/
END:VEVENT
END:VCALENDAR