Open Source Leadership Summit 2018

How do you keep track of open source usage when every division or subsidiary has its own development process, its own preferred tech stack(s), and its own methodology of component tracking (or lack thereof)? Did you answer “with a spreadsheet”? You're not alone, but there is a better way. In this talk we’ll go through the organizational and technical challenges of keep track of open-source across the heterogenous enterprise, and discuss how SPDX, Linux Foundation's open, standards-based mechanism of tracking, aggregating, and exchanging Bill of Materials (BOM) data enables open source governance at scale.