SW360 experience
Hi all,
I first heard about SW360 during the presentations at the Linux Open Source Summit in Edinburgh. Searching around, though, I see very little mention of it, to the point where it's difficult to see whether this is a project just finding its feet, or something that has already been abandoned. I'd be interested in hearing from anyone who is actually using it in anger, who is willing to share their experiences.
Thanks for any info,
steve
Hi Steve,
sw360 is an open source project under the umbrella of the Eclipse foundation. Its is a software component and product management system, which is on the one hand a system where you can manage the software components you are using no matter whether they are OSS, commercial or internal components or other artifacts on the other hand it is a system to manage your products (aka projects) in order to keep track of the bill of “materials”, to generate the OSS declaration document and source code bundles in scope of a product.
For the integration in the CI/CD workflow it provides a REST API
You can find the source code here: https://github.com/eclipse/sw360
Some documentation is available here: https://github.com/eclipse/sw360/wiki
If you like we can arrange a web meeting since we are using sw360 in our daily work.
Ciao
Oliver
Von: spdx@... <spdx@...> Im Auftrag von
Steve Kilbane
Gesendet: Donnerstag, 16. Mai 2019 18:15
An: spdx@...
Cc: Kilbane, Stephen <Stephen.Kilbane@...>
Betreff: [spdx] SW360 experience
Hi all,
I first heard about SW360 during the presentations at the Linux Open Source Summit in Edinburgh. Searching around, though, I see very little mention of it, to the point where it's difficult to see whether this is a project just finding its feet, or something that has already been abandoned. I'd be interested in hearing from anyone who is actually using it in anger, who is willing to share their experiences.
Thanks for any info,
steve
Thanks for responding, Oliver.
I've copied Steve here, as his message got caught up in the mailing list filter, as it looks likes he's not a member of the SPDX general mailing list. (Steve - you can join here: https://spdx.org/participate )
It occurred to me that perhaps a session on sw360 (and how it works with SPDX) might be a good topic for an upcoming general call? Phil - what do you think?
Jilayne
Hi Steve,
sw360 is an open source project under the umbrella of the Eclipse foundation. Its is a software component and product management system, which is on the one hand a system where you can manage the software components you are using no matter whether they are OSS, commercial or internal components or other artifacts on the other hand it is a system to manage your products (aka projects) in order to keep track of the bill of “materials”, to generate the OSS declaration document and source code bundles in scope of a product.
For the integration in the CI/CD workflow it provides a REST API
You can find the source code here: https://github.com/eclipse/sw360
Some documentation is available here: https://github.com/eclipse/sw360/wiki
If you like we can arrange a web meeting since we are using sw360 in our daily work.
Ciao
Oliver
Von: spdx@... <spdx@...> Im Auftrag von Steve Kilbane
Gesendet: Donnerstag, 16. Mai 2019 18:15
An: spdx@...
Cc: Kilbane, Stephen <Stephen.Kilbane@...>
Betreff: [spdx] SW360 experience
Hi all,
I first heard about SW360 during the presentations at the Linux Open Source Summit in Edinburgh. Searching around, though, I see very little mention of it, to the point where it's difficult to see whether this is a project just finding its feet, or something that has already been abandoned. I'd be interested in hearing from anyone who is actually using it in anger, who is willing to share their experiences.
Thanks for any info,
steve
Hi Oliver,
if you arrange a web meeting on sw360 I would be glad to join. I have installed sw360 and started playing with it, but I would like to see it used by someone who masters it...
Thanks!
Ciao
AlbertoHi Steve,
sw360 is an open source project under the umbrella of the Eclipse foundation. Its is a software component and product management system, which is on the one hand a system where you can manage the software components you are using no matter whether they are OSS, commercial or internal components or other artifacts on the other hand it is a system to manage your products (aka projects) in order to keep track of the bill of “materials”, to generate the OSS declaration document and source code bundles in scope of a product.
For the integration in the CI/CD workflow it provides a REST API
You can find the source code here: https://github.com/eclipse/sw360
Some documentation is available here: https://github.com/eclipse/sw360/wiki
If you like we can arrange a web meeting since we are using sw360 in our daily work.
Ciao
Oliver
Von: spdx@... <spdx@...> Im Auftrag von Steve Kilbane
Gesendet: Donnerstag, 16. Mai 2019 18:15
An: spdx@...
Cc: Kilbane, Stephen <Stephen.Kilbane@...>
Betreff: [spdx] SW360 experience
Hi all,
I first heard about SW360 during the presentations at the Linux Open Source Summit in Edinburgh. Searching around, though, I see very little mention of it, to the point where it's difficult to see whether this is a project just finding its feet, or something that has already been abandoned. I'd be interested in hearing from anyone who is actually using it in anger, who is willing to share their experiences.
Thanks for any info,
steve
FYI, we will have Michael from Siemens presenting on sw360 during the OpenChain First Monday call in June (9am Pacific on June 3rd). As a bonus we will also have Oliver discussing the Open Source Compliance Tool Chain and how we can all collaborate around that.
Join the call: https://uberconference.com/openchainproject
Optional US dial in number: 855-889-3011
No PIN needed
If you need to use an international phone number please check:
https://www.uberconference.com/international for country numbers.
1. Dial the country number based on your location.
2. Enter 855 889 3011 and then # to enter the room.
Regards
Shane
On May 21, 2019, at 3:29, Alberto Pianon <alberto@...> wrote:
Hi Oliver,
if you arrange a web meeting on sw360 I would be glad to join. I have installed sw360 and started playing with it, but I would like to see it used by someone who masters it...
Thanks!
Ciao
Alberto
Il 20/05/2019 08:46, Oliver Fendt ha scritto:Hi Steve,
sw360 is an open source project under the umbrella of the Eclipse foundation. Its is a software component and product management system, which is on the one hand a system where you can manage the software components you are using no matter whether they are OSS, commercial or internal components or other artifacts on the other hand it is a system to manage your products (aka projects) in order to keep track of the bill of “materials”, to generate the OSS declaration document and source code bundles in scope of a product.
For the integration in the CI/CD workflow it provides a REST API
You can find the source code here: https://github.com/eclipse/sw360
Some documentation is available here: https://github.com/eclipse/sw360/wiki
If you like we can arrange a web meeting since we are using sw360 in our daily work.
Ciao
Oliver
Von: spdx@... <spdx@...> Im Auftrag von Steve Kilbane
Gesendet: Donnerstag, 16. Mai 2019 18:15
An: spdx@...
Cc: Kilbane, Stephen <Stephen.Kilbane@...>
Betreff: [spdx] SW360 experience
Hi all,
I first heard about SW360 during the presentations at the Linux Open Source Summit in Edinburgh. Searching around, though, I see very little mention of it, to the point where it's difficult to see whether this is a project just finding its feet, or something that has already been abandoned. I'd be interested in hearing from anyone who is actually using it in anger, who is willing to share their experiences.
Thanks for any info,
steve