Published June 11, 2025 | Version v1

Building a Safer Open Source Supply Chain with Software Heritage, the Great Library of Source Code

  • 1. Inria
  • 2. Institut Polytechnique de Paris
  • 3. ROR icon Software Heritage

Description

Software Heritage collects publicly available source code from numerous software projects and tracks their ongoing development.

Outline
1 Preface 
2 Source code as knowledge
3 Software Heritage
4 Highlight #1: The evolution of public code
5 Highlight #2: Cross-fork 1-day vulnerabilities
6 Highlight #3: Efficient open compliance
7 What about AI?
8 Conclusion

Files

2025-06-11-ada-europe.pdf

Files (8.4 MB)

Name Size Download all
md5:1334594ca4c96c46d170a16c4dddad5a
8.4 MB Preview Download