From Policy to Pipeline: CRA Open-Source Stewardship, Automated SBOMs, and the OCCTET Toolchain

In this 40-minute technical session, SECURE invites the EU-funded OCCTET project to break down the legal obligations of open-source stewardship under the CRA and demonstrate how to automate compliance. Attendees will see how the ORT Server (OSS Review Toolkit) and the OCCTET toolchain (powered by Eclipse Apoapsis) streamline dependency analysis, generate production-grade Software Bills of Materials (SBOMs), and lay the groundwork for automated Vulnerability Exploitability eXchange (VEX) workflows without manual overhead.