From Best Practices to Evidence. How Software Heritage and SWHID Support Trustworthy Open Source

Software Heritage collects publicly available source code from numerous software projects and tracks their ongoing development.

The SWHID (SoftWare Hash Identifier) is a unique and permanent identifier for a piece of software, derived directly from the code’s content. It became ISO/IEC international standard 18670 on April 23, 2025.

This talk was delivered by Wendi Urribarri, an SWH ambassador and Process & Quality Engineer at Woven by Toyota, during the ELISA (Enabling Linux In Safety Applications) Workshop in London, 2026.

ELISA, an open source project under The Linux Foundation, aims to define and maintain a common set of elements, processes and tools that can be incorporated into Linux-based, safety-critical systems amenable to safety certification – systems whose failure could result in loss of human life, significant property or environmental damage.