Using open source code helps development teams save time and tap into the knowledge of domain experts who contribute to open source projects. Black Duck engages with open source security initiatives in multiple areas including best practices, information sharing, license compliance, software Bill of Materials (SBOM), API standardization, and more.

To help raise the bar for open source software security and stay informed about the latest development innovations, Black Duck employees serve or have served as subject matter experts for open source community initiatives—including working groups, programs, and projects related to open source governance, adoption, and success. 

Open Source Community Initiatives

Automotive Grade Linux (AGL)

Cloud Native Computing Foundation (CNCF)

Cloud Native Landscape

Core Infrastructure Initiative

Laboratory for Innovation Science at Harvard

OpenShift Kubernetes Distribution (OKD)

OpenChain

Open Invention Network (OIN)

OpenShift Commons

Open Source Security Foundation (OpenSSF)

Open Web Application Security Project (OWASP)

SPDX

Software Package Data Exchange (SPDX)

Uptane logo

Uptane

Web Application Security Consortium

Zephyr