Eclipse Apoapsis ORT server: An open source platform to automate CRA checks
About this talk
This talk features Martin Nonnenmacher and Sebastian Schuberth from Double Open, who present the Eclipse Apoapsis ORT Server, an open source platform designed to automate compliance checks in relation to the Cyber Resilience Act. The session highlights the capabilities of ORT Server, which builds on the OSS Review Toolkit to provide software composition analysis, license compliance, vulnerability detection, and policy enforcement within a streamlined and scalable workflow.
The speakers discuss how the platform transitions from developer-centric workflows to a web-based interface, allowing broader participation from legal and compliance teams. ORT Server enables organizations to automate processes such as continuous vulnerability monitoring, dependency analysis, and SBOM generation, facilitating more efficient compliance efforts and reducing manual workloads while addressing scalability challenges in compliance operations.
