Coursera Spring Sale
40% Off Coursera Plus Annual!
Grab it
Learn how to enhance open source software license compliance efficiency in the Yocto Project through strategic tool integration in this 30-minute conference talk from the Linux Foundation. Discover the critical importance of maintaining accurate OSS license information within Yocto's recipe configuration files and understand how this practice directly improves the quality of SPDX files generated by the build system. Explore the existing mechanisms available in Yocto for license compliance management and examine a proposed methodology for streamlining license detection and updates through the integration of external tools like FOSSology via the meta-spdxscanner layer. Gain insights from Fujitsu's extensive experience supporting SPDX evolution and their contributions as maintainers of meta-spdxscanner and top contributors to the Yocto Project, particularly in the context of Automotive Grade Linux implementations. Understand how proper license compliance practices contribute to creating reliable Software Bill of Materials (SBOM) foundations that benefit companies throughout the software supply chain.
