SOSS Community Day Japan 2024

Linux distributions provide users with great convenience by centralized access to multiple independent OSS into a single location. This has been an essential function that OSS can be popularized and rule the world. The nature of distributions that provide convenience to users by consolidating multiple means of access can be expected to play an important role in OSS supply chain security enhancement. For example, SBOM, provenance, and vulnerability information can be provided with trust. Currently, however, it is difficult to provide a unified means of providing these in a convenient manner while guaranteeing their authenticity and integrity. In this session, the speaker will share the current issues as a developer of multiple Linux distributions and will propose the role that distributions and distributors should play in the enhancement of supply chain security. Then he will propose necessary mechanisms to achieve it and discuss them with the attendees.