[{"data":1,"prerenderedAt":212},["ShallowReactive",2],{"site:settings":3,"site:navigation":51,"site:footer":128,"newsroom:banner:orc":9,"page:\u002Fevents\u002F44115-from-policy-to-pipeline-cra-open-source-stewardship-automated-sboms-and-the-occtet-toolchain":9,"newsroom:event:44115":190,"breadcrumbs:\u002Fevents\u002F44115-from-policy-to-pipeline-cra-open-source-stewardship-automated-sboms-and-the-occtet-toolchain":207},{"id":4,"title":5,"callForAction":6,"cookieBanner":9,"description":10,"extension":11,"featuredContentPublishTarget":12,"heroImage":13,"keywords":14,"logo":20,"logoInverse":9,"logoWidth":21,"meta":22,"search":23,"seoTitleSuffix":27,"skipLinkText":28,"socialImage":29,"socials":32,"stem":49,"__hash__":50},"settings\u002Fdata\u002Fsettings.yml","Open Regulatory Compliance Working Group",{"text":7,"href":8},"Get involved","\u002Fparticipate\u002F",null,"The open source community is collaborating to establish common specifications for secure software development based on open source best practices.","yml","orc","\u002Fimages\u002Fhero\u002Fdefault.jpg",[15,16,17,18,19],"regulatory compliance","cybersecurity processes","royalty-free patent licence","open source community collaboration","Eclipse Foundation Specification Process","\u002Fimages\u002Forc-logo.png",120,{},{"label":24,"placeholder":25,"menuLabel":26},"Search","Search the site…","Menu"," | Open Regulatory Compliance Working Group","Skip to main content",{"backgroundImage":30,"eyebrow":31},"\u002Fimages\u002Fog\u002Fbackground.jpg","orcwg.org",[33,37,41,45],{"name":34,"icon":35,"url":36},"LinkedIn","fa6-brands:linkedin-in","https:\u002F\u002Fwww.linkedin.com\u002Fshowcase\u002Fopen-regulatory-compliance\u002F",{"name":38,"icon":39,"url":40},"YouTube","fa6-brands:youtube","https:\u002F\u002Fwww.youtube.com\u002F@ORCWG",{"name":42,"icon":43,"url":44},"Bluesky","fa6-brands:bluesky","https:\u002F\u002Fbsky.app\u002Fprofile\u002Forcwg.org",{"name":46,"icon":47,"url":48},"Mastodon","fa6-brands:mastodon","https:\u002F\u002Ffosstodon.org\u002F@orcwg","data\u002Fsettings","iqJrJNmDNtN8-TkFCgBoO4uPvPJ_weRDDZ6KgK5ttNE",{"id":52,"extension":11,"main":53,"meta":125,"stem":126,"__hash__":127},"navigation\u002Fdata\u002Fnavigation.yml",[54,72,84,101],{"text":55,"children":56},"About",[57,60,63,66,69],{"text":58,"href":59},"ORC Working Group","\u002Fabout\u002F",{"text":61,"href":62},"Cyber Resilience SIG","\u002Fspecial-interest-groups\u002Fcyber-resilience\u002F",{"text":64,"href":65},"AI Policy & Compliance SIG","\u002Fspecial-interest-groups\u002Fai-policy-and-compliance\u002F",{"text":67,"href":68},"Steering Committee","\u002Fcommittees\u002Fsteering-committee\u002F",{"text":70,"href":71},"Meeting Minutes","\u002Fcommittees\u002Fminutes\u002F",{"text":73,"children":74},"Membership",[75,78,81],{"text":76,"href":77},"Our Members","\u002Fmembership\u002F",{"text":79,"href":80},"Become a Member","\u002Fmembership\u002Fbecome-a-member\u002F",{"text":82,"href":83},"Participation and Membership FAQ","\u002Fabout\u002Fparticipation-and-membership-faq\u002F",{"id":85,"text":86,"children":87},"cra","Cyber Resilience Act",[88,91,95,98],{"text":89,"href":90},"About CRA","\u002Fcra\u002Fabout",{"text":92,"href":93,"external":94},"CRA FAQ","https:\u002F\u002Fcra.orcwg.org\u002F",true,{"text":96,"href":97},"CRA Resources","\u002Fcra\u002Fresources",{"text":99,"href":100,"external":94},"CRA Hub on GitHub","https:\u002F\u002Fgithub.com\u002Forcwg\u002Fcra-hub",{"text":102,"children":103},"Resources",[104,107,110,113,116,119,122],{"text":105,"href":106},"Events","\u002Fevents\u002F",{"text":108,"href":109},"Community Calendar","\u002Fresources\u002Fcalendar\u002F",{"text":111,"href":112},"Blog","\u002Fblog\u002F",{"text":114,"href":115},"Videos","\u002Fresources\u002Fvideos\u002F",{"text":117,"href":118},"Learning Hub","\u002Ftraining\u002F",{"text":120,"href":121},"Marketing Resources","\u002Fresources\u002Fmarketing-resources\u002F",{"text":123,"href":124,"external":94},"ORC Store","https:\u002F\u002Feclipse-foundation.store\u002Fcollections\u002Fopen-regulatory-compliance-orc",{},"data\u002Fnavigation","XYDVypNX67n8V4VQI_JTrw0cI16uV5jtctVXjN-DeKo",{"id":129,"backToTopText":130,"callToAction":9,"colorMode":9,"copyright":131,"description":9,"extension":11,"manageCookiesText":132,"meta":133,"sections":134,"socialsHeading":187,"stem":188,"__hash__":189},"footer\u002Fdata\u002Ffooter.yml","Back to the top","Copyright © Eclipse Foundation AISBL. All Rights Reserved.","Manage Cookies",{},[135,152,171],{"id":136,"heading":137,"links":138},"footer-eclipse-foundation","Eclipse Foundation",[139,141,144,147,149],{"text":55,"href":140},"https:\u002F\u002Fwww.eclipse.org\u002Forg\u002F",{"text":142,"href":143},"Projects","https:\u002F\u002Fprojects.eclipse.org\u002F",{"text":145,"href":146},"Collaborations","https:\u002F\u002Fwww.eclipse.org\u002Fcollaborations\u002F",{"text":73,"href":148},"https:\u002F\u002Fwww.eclipse.org\u002Fmembership\u002F",{"text":150,"href":151},"Sponsor","https:\u002F\u002Fwww.eclipse.org\u002Fsponsor\u002F",{"id":153,"heading":154,"showManageCookies":94,"links":155},"footer-legal","Legal",[156,159,162,165,168],{"text":157,"href":158},"Privacy Policy","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fprivacy\u002F",{"text":160,"href":161},"Terms of Use","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fterms-of-use\u002F",{"text":163,"href":164},"Compliance","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002Fcompliance\u002F",{"text":166,"href":167},"Code of Conduct","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Fdocuments\u002FCommunity_Code_of_Conduct.php",{"text":169,"href":170},"Legal Resources","https:\u002F\u002Fwww.eclipse.org\u002Flegal\u002F",{"id":172,"heading":173,"links":174},"footer-more","More",[175,178,181,184],{"text":176,"href":177},"Report a Vulnerability","https:\u002F\u002Fwww.eclipse.org\u002Fsecurity\u002F",{"text":179,"href":180},"Service Status","https:\u002F\u002Fstatus.eclipse.org\u002F",{"text":182,"href":183},"Contact Us","https:\u002F\u002Fwww.eclipse.org\u002Forg\u002Ffoundation\u002Fcontact.php",{"text":185,"href":186},"Support","https:\u002F\u002Fwww.eclipse.org\u002Fprojects\u002Fsupport\u002F","Follow Us:","data\u002Ffooter","hysVbukIYO6sJMzwzramCt7SpkkTNrrGCAP94Td1geE",{"id":191,"type":192,"image":193,"attendance_type":194,"ef_participation":195,"title":196,"date":197,"end-date":198,"locationName":199,"description":200,"infoLink":201,"registration":202,"address":203,"field_content_publish_to":205},"44115","ee","https:\u002F\u002Fnewsroom.eclipse.org\u002Fsites\u002Fdefault\u002Ffiles\u002Fstyles\u002Flarge\u002Fpublic\u002Fevents\u002FScreenshot%202026-11-02%20104737.png?itok=VHIEKPI2","virtual","ef_speaking","From Policy to Pipeline: CRA Open-Source Stewardship, Automated SBOMs, and the OCCTET Toolchain","2026-11-18T10:30:00Z","2026-11-18T23:30:00Z","","In this 40-minute technical session, SECURE invites the EU-funded OCCTET project to break down the legal obligations of open-source stewardship under the CRA and demonstrate how to automate compliance. Attendees will see how the ORT Server (OSS Review Toolkit) and the OCCTET toolchain (powered by Eclipse Apoapsis) streamline dependency analysis, generate production-grade Software Bills of Materials (SBOMs), and lay the groundwork for automated Vulnerability Exploitability eXchange (VEX) workflows without manual overhead.","https:\u002F\u002Fevents.teams.microsoft.com\u002Fevent\u002F65192b4e-1b80-464c-abd2-5d0c3e2a7991@a73390eb-2f02-4cf6-8481-0fd4123efb55","https:\u002F\u002Fevents.teams.microsoft.com\u002Fevent\u002F65192b4e-1b80-464c-abd2-5d0c3e2a7991@a73390eb-2f02-4cf6-8481-0fd4123efb55\u002Fregistration",{"street":199,"country":9,"city":9,"zip":9,"geoLoc":204},{"lat":199,"lon":199},[206,12],"eclipse_org",[208,211],{"to":209,"label":210},"\u002F","ORC",{"to":106,"label":105},1794240205096]