Open Delivery Gearยถ

Do you know if your next software shipment is compliant? ODG does.

Open Delivery Gear automates compliance scanning, tracking, and reporting for software components throughout your delivery pipeline. Continuous monitoring for CVEs, malware, licences, and secrets with automated assignment to the right teams and GitHub integration for seamless workflow.

Compliance visibility for every shipment at scale, from container images to static binaries to cloud artefacts, built for sovereign cloud deliveries.


Getting Startedยถ

Choose your documentation path based on your role and interests, or explore the Overview section below to learn more about our mission and motivation:

๐Ÿ‘ค For ODG Users

Use ODG to monitor and secure your software delivery

contents/end-user/index.html
๐Ÿ› ๏ธ For Contributors

Extend and contribute to the ODG platform

contents/contributor/index.html

Overviewยถ

We believe security and compliance should be embedded, not bolted on. Read up on our mission, explore our approach, and discover our capabilities:

๐Ÿ’ก Why ODG?

Learn why security and compliance need to be embedded into software deliveries

contents/overview.html#why-do-we-need-to-change-something
โš™๏ธ How It Works

Understand how ODG automates processes and integrates into supply chain security

contents/overview.html#how-we-help-you-with-a-sovereign-cloud-delivery
๐Ÿ“ฆ What Is It?

Explore what end-to-end automations are provided and what integration points fit your use-case

contents/overview.html#what-is-open-delivery-gear

Get in Touchยถ

Questions? Ideas? Bugs? Weโ€™re here to help and collaborate:

๐Ÿ“… Community Calls

Join our regular community meetings

https://ocm.software/community/
๐Ÿ—บ๏ธ Roadmap

See what weโ€™re working on next

https://github.com/orgs/open-component-model/projects/17/views/10
๐Ÿ’ป GitHub Repository

Source code and contributions

https://github.com/open-component-model/open-delivery-gear
๐Ÿ“ฆ Open Component Model

Learn about OCM

https://ocm.software