OWASP Software Component Verification Standard

• Main
• Roadmap
• Getting Involved
• Project About

OWASP Software Component Verification Standard This project is currently incubating... Stay tuned. Licensing The guide is licensed under the Creative Commons Attribution-ShareAlike 4.0 license, so you can copy, distribute and transmit the work, and you can adapt it, and use it commercially, but all provided that you attribute the work and if you alter, transform, or build upon this work, you may distribute the resulting work only under the same or similar license to this one.

Project Resources GitHub Repository Slack Channel Project Leader Steve Springett Related Projects Supply Chain Component Analysis Dependency-Check Dependency-Track Classifications

As of August, 2019, the highest priority is to get a usable rough draft which can be iterated on by December 31, 2019.

Involvement in the development and promotion of OWASP SCVS is actively encouraged! You do not have to be a security expert or a programmer to contribute. Some of the ways you can help are as follows:

• Supply chain risk identification
• Documentation
• Strategy
• Messaging

PROJECT INFO What does this OWASP project offer you?

RELEASE(S) INFO What releases are available for this project?

what is this project? Name: Software Component Verification Standard Purpose: N/A License: Creative Commons Attribution ShareAlike 3.0 License who is working on this project? Project Leader(s): Steve Springett @ how can you learn more? Project Pamphlet: Not Yet Created Project Presentation: Mailing list: N/A Project Roadmap: Not Yet Created Main links: GitHub Repository Key Contacts Contact Steve Springett @ to contribute to this project Contact Steve Springett @ to review or sponsor this project

current release Not Yet Published last reviewed release Not Yet Reviewed other releases