Complex products like vehicles consist of many major components that are built using a open source software. As a manufacturer we need to comply with the licenses of all embedded open source software elements. For this purpose we have recently published Eclipse Disuko.
Eclipse Disuko focuses on consuming SBOMs and the resulting actions based on their assessment. It is not meant to produce SBOMs from source code since that is well-supported already by other projects. SBOMs might be created by combining imported SBOMs though. Eclipse Disuko comes with a license and policy database that helps a project owner to assess FOSS licenses based on self-configured use cases and understand the resulting license obligations.
The talk outlines and demos Eclipse Disuko with the goal to attract further users and contributions.
