SW360 is a third-party software component catalog that assigns components to products and projects. It has gone through several versions with new features added, including SPDX BOM import, improved FOSSology integration, and REST endpoints for SHA1 search and FOSSology triggering. Upcoming versions will include change logs for every record and dependency updates. The presentation provides an overview of SW360's capabilities and ecosystem projects like sw360chores and sw360vagrant that help set up the SW360 infrastructure.

1. SW360 Update
Tooling Telco 2020-03-24
Eclipse SW360 ProjectCC-BY-SA-4.0

2. CC-BY-SA-4.0 © Siemens AG 2020
2018Page 2 Michael C. Jaeger – Eclipse SW360
Recap – SW360 did what?
Product A Product B Project 1
SW360 is a 3rd party software component catalogue
Assigns 3rd party components to products or projects
A B C H
C G
I
J
E
A B C D E F G H I J …
Goals and Benefits
• Reuse information
about components
• Coordinate product
documentation
process
• Support software
clearing

3. CC-BY-SA-4.0 © Siemens AG 2020
2018Page 3 Michael C. Jaeger – Eclipse SW360
Main Use Case: Report Generation 1/2
…SPDX
A
SPDX
B
SPDX
C
SPDX
D
SPDX
E
SPDX
F
SPDX
G
SPDX
H
SPDX
I
SPDX
J
SPDX
SPDX
sw360
SPDX
Tool X

4. CC-BY-SA-4.0 © Siemens AG 2020
2018Page 4 Michael C. Jaeger – Eclipse SW360
Main Use Case: Report Generation 2/2

5. CC-BY-SA-4.0 © Siemens AG 2020
2018Page 5 Michael C. Jaeger – Eclipse SW360
News from SW360
Versions
• 4.0 Last release on Liferay 6.2
• 5.0 First release on Liferay 7.2
• 6.0: First integration with FOSSology using REST API
• 7.0.1: License change to EPL-2.0
• 8.0.1: SPDX BOM Import, 8.1: Improved FOSSology Integration
Next Steps
• Planned: 9.0 with changelog for every record, update of dependencies
• Changelog: to follow on changes applied to projects, releases, components

6. CC-BY-SA-4.0 © Siemens AG 2020
2018Page 6 Michael C. Jaeger – Eclipse SW360
New Feature: REST Endpoint for SHA1 search

7. CC-BY-SA-4.0 © Siemens AG 2020
2018Page 7 Michael C. Jaeger – Eclipse SW360
New Feature: REST Endpoint for FOSSology Trigger

8. CC-BY-SA-4.0 © Siemens AG 2020
2018Page 8 Michael C. Jaeger – Eclipse SW360
New Feature: SPDX BOM Import

9. CC-BY-SA-4.0 © Siemens AG 2020
2018Page 9 Michael C. Jaeger – Eclipse SW360
New Feature: Management of Clearing Request 1/2

10. CC-BY-SA-4.0 © Siemens AG 2020
2018Page 10 Michael C. Jaeger – Eclipse SW360
New Feature: Management of Clearing Request 2/2

11. CC-BY-SA-4.0 © Siemens AG 2020
2018Page 11 Michael C. Jaeger – Eclipse SW360
More Projects - SW360のエコシステム: その他
• sw360chores: Docker
• Setup of SW360 infrastructure with Docker
• https://github.com/sw360/sw360chores
• sw360vagrant: Vagrant
• Use VirtualBox or AWS EC2 to create an SW360 instance
• https://github.com/sw360/sw360vagrant
• LDAP Adapter
• https://github.com/sw360/ldapOrganizationMappingExt

12. CC-BY-SA-4.0 © Siemens AG 2020
2018Page 12 Michael C. Jaeger – Eclipse SW360
ご清聴ありがとうございました … questions?
License: CC-BY-SA-4.0
Copyright 2014-2018 Siemens AG
Michael C. Jaeger
(translated by Yoshitake Kobayashi, Toshiba Corporation)
Internet
https://www.eclipse.org/sw360
More links
https://github.com/fossology/fossology
https://github.com/eclipse/sw360