FOSSLight

Mon, 01 Jan 0001 00:00:00 +0000

FOSSLight is an open source project led by LG Electronics. It analyzes source code, binaries, and dependencies using various scanners to generate an SBOM (Software Bill of Materials). FOSSLight Hub provides open source management, license management, and vulnerability management features to support the compliance process.

Official website: https://fosslight.org/
GitHub: https://github.com/fosslight/fosslight_hub
License: Apache-2.0

1. Features

Multiple scanner integration: Integrates ScanCode Toolkit, SPDX Tools, CycloneDX, FOSSology, and other open source scanners
Wide scan target support: Source code, binaries, container images, Linux packages, and more
SBOM generation and management: Creates and manages SBOMs in various formats (SPDX, CycloneDX, Excel, Text)
License detection and management: Accurately detects and manages open source license information
Vulnerability integration: Links to external vulnerability databases such as NVD and CVE
FOSSLight Hub: Web-based UI providing open source management, license management, and vulnerability management

2. Installation

FOSSLight consists of FOSSLight Scanner and FOSSLight Hub. The easiest way to install both is using Docker Compose.

27th Meeting

Mon, 01 Jan 0001 00:00:00 +0000

Schedule

Date: 2025-10-21 (Tue) 3:00 PM - 4:50 PM
Location: Open Source Tech Day 2025, 4F Changjo Room 2 (aT Center - https://maps.app.goo.gl/CcH1kxo8qfQrgp8i8 )

Agenda

Time	Agenda	Speaker	Slide
15:00~15:20	OpenChain Global Update	Shane Coughlan, Linux Foundation	pdf
15:20~15:40	ETRI Open Source Governance Package	Sungkwang Eom, ETRI	pdf
15:40~16:00	FOSSLight 2.0	Kyungseon Min, LG Electronics	pdf
16:00~16:20	Adopting Olive Action	Younghwan Kim, Kakao	pdf
16:20~16:40	What’s new in OSORI	Soim Kim, LG Electronics	pdf
16:40~16:50	Can I contribute to open source with AI-generated code?	Seoyeon Lee, LINE Plus	pdf

FOSSLight on OpenChain KWG