OWASP Software Component Verification Standard

• Main
• Roadmap
• Getting Involved
• Project About

OWASP Software Component Verification Standard This project is currently incubating... Stay tuned. Licensing A project must be licensed under a community friendly or open source license. For more information on OWASP recommended licenses, please see OWASP Licenses. While OWASP does not promote any particular license over another, the vast majority of projects have chosen a Creative Commons license variant for documentation projects, or a GNU General Public License variant for tools and code projects. This example assumes that you want to use the AGPL 3.0 license. This program is free software: you can redistribute it and/or modify it under the terms of the link GNU Affero General Public License 3.0 as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. OWASP XXX and any contributions are Copyright © by {the Project Leader(s) or OWASP} {Year(s)}.

Project Resources GitHub Repository Project Leader Steve Springett Related Projects Supply Chain Component Analysis Dependency-Check Dependency-Track Classifications

As of August, 2019, the highest priority is to get a usable rough draft which can be iterated on by December 31, 2019.

Involvement in the development and promotion of OWASP SCVS is actively encouraged! You do not have to be a security expert or a programmer to contribute. Some of the ways you can help are as follows:

• Supply chain risk identification
• Documentation
• Strategy
• Messaging

PROJECT INFO What does this OWASP project offer you?

RELEASE(S) INFO What releases are available for this project?

what is this project? Name: Software Component Verification Standard (home page) Purpose: N/A License: Creative Commons Attribution ShareAlike 3.0 License who is working on this project? Project Leader(s): Steve Springett @ how can you learn more? Project Pamphlet: Not Yet Created Project Presentation: Mailing list: N/A Project Roadmap: Not Yet Created Key Contacts Contact Steve Springett @ to contribute to this project Contact Steve Springett @ to review or sponsor this project

current release Not Yet Published last reviewed release Not Yet Reviewed other releases