FOSSA, a modern, devops-friendly open source management platform enables the following:
Comprehensive Vulnerability Detection
Security teams benefit from a continuously updated vulnerability database that fuels real-time alerts across all projects.
Intelligent Issue Resolution
Automotive organizations get actionable guidance to resolve compliance issues and remediate vulnerabilities.
Developers get compliance violation alerts in real time via Slack, Jira, or email, and can make any code changes directly in their preferred environments.
Improved Code Quality
Identify and replace outdated components and reduce technical debt with FOSSA’s Quality Feature.
Broad Ecosystem Support
Identify and resolve security and compliance risk across a wide range of languages, including C,C++, monorepos, RPM, Debian, Jars, and more.
Strong Access Control
Follow principles of least privilege with customizable roles and permissions.
Fast Time to Market
FOSSA integrates with commonly used build systems (e.g., Travis, Jenkins, CircleCI) and repositories (e.g., GitLab, Bitbucket, GitHub), enabling automotive development organizations to shift left and accelerate the SDLC.
Compile software Bills of Materials and stay audit-ready with real-time, standardized reporting at scale across a variety of development environments.
AOSP notice files
Automated workflow to generate a "full" version of the AOSP NOTICE file and provide a workflow to inspect, approve and (if necessarily) manually override our generated NOTICE file.