Workshop Beginner

Strengthening Your FOSS Project: Essential Files and Automated License Compliance(FOSSA-CLI)

Approved

Session Description

Open-source success isn’t just about good code - it’s also about the files that frame your project.
This lightning talk will show beginners and maintainers which non-code files (README, LICENSE, CONTRIBUTING, CODE_OF_CONDUCT, SECURITY) make a project welcoming and trustworthy.
We’ll also explore FOSSA CLI, a simple tool to automatically scan your project for license conflicts and keep your LICENSE FILE accurate.
By the end, attendees will know exactly how to structure their repo and automate license compliance to protect themselves and their contributors.

Key Takeaways

For Beginners:

A quick checklist of the must-have files in any FOSS repo
How to make your first contribution more confidently by reading these files.
How to run FOSSA CLI locally to see license info for your code or dependencies.

For Maintainers:

How to structure a repository so contributors can onboard easily.
How to use FOSSA CLI to continuously monitor license compliance.
Practical tips to combine good documentation with automated compliance.

For Everyone:

Why good project hygiene builds trust and community.
Free resources and templates to get started fast.

References

https://learn.microsoft.com/en-us/training/modules/manage-sensitive-data-security-policies/2-set-security-policies

https://github.com/fossas/fossa-cli

https://docs.github.com/en/communities/setting-up-your-project-for-healthy-contributions/creating-a-default-community-health-file

Session Categories

Tutorial about using a FOSS project

Contributing to FOSS

Technology / FOSS licenses, policy

Introducing a FOSS project or a new version of a popular project

Community

Engineering practice - productivity, debugging

Speakers

Santhosh NC

Lead Infra Consultant | Thoughtworks

Seasoned, critical-thinking DevSecOps engineer with over 9 years of robust experience in designing, developing, building, testing, implementing, securing, operating, and monitoring applications and infrastructure across various domains.

Proficient in DevOps and Multi-Cloud technologies, demonstrating expertise in automated build and deployment tasks by creating comprehensive CI/CD/CT pipelines alongside infrastructure automation.

A talented performer driven by the pursuit of knowledge and adept at navigating and instructing others in emerging technologies.

Possesses a proven ability to collaborate effectively with excellent communication skills, autonomously and within diverse internal teams, to drive project success and innovation.

Reviews

No reviews yet.