Open Source Summit North America 2018

The last decade has seen a substantive evolution across the open source compliance governance landscape: our industry has moved from relying principally on developer adherence to policy (i.e. “trust”), to the implementation of effort-heavy license and code scans at release time, to having fully automated open source management systems integrated across cloud software CI/CD pipelines: today, there are dozens of scan tools and systems to choose from that can do this – it is even possible to build an open source management system…entirely from open source!

Unfortunately, however, even with the great advances in compliance tools and technology, our industry still lags the pace of innovation: historical anxieties around open source contamination and other IP risks persist, and are even magnified, in this era of package managed next-gen programming languages. Further, modern software development has brought additional challenges: security vulnerabilities, API calls to remote web services, data privacy and protection, export controls – the list of legal compliance topics that need to be observed and managed when it comes to open source use is long and daunting.

In this session, we welcome an open discussion around perceived risks and current priorities related to open source management. SAP is happy to share the evolution of our own open source compliance landscapes, including the solutions we have found (and need). We look forward to hearing and sharing best practices with our industry peers.