
FOSSEra Portal
with Black Duck
Open source integrated management portal solution
FOSSEra Portal with Black Duck
Posera Portal with Black Duck is an open source management portal solution that enables integrated performance of open source management required for each software development life cycle. It provides a complete open source management environment by linking with Black Duck, the No. 1 domestic and international market share company with 20 years of accumulated data (1.5 PB content).
Key Features
-
Project Management
- Check open source components, licenses, and security vulnerabilities used in the project
- Operation possible by affiliate, headquarters, or team
- Provide exception handling process
-
SDLC based inspection
- Pre-Review: Pre-Review of Open Source to be Used
- Self-check: Developer self-review during the development phase
- Official inspection: Final inspection after development is completed
-
Open source automatic import
- Automatic import and inspection of open source from external repositories such as Maven and NPM
- Include all libraries with dependencies and transitive dependencies.
- Managed by SBOM through automatic inspection upon import
-
Open source repository
- Store and share imported open source in internal storage
-
Open source search
- Search for open source components, licenses, and security vulnerabilities
- You can check the license and security vulnerabilities of components used in a specific project.
-
Community
- Affiliate shared community operation possible
- Affiliate companies can operate individual communities
-
Statistics
- Statistics on open source inspection status by project
- Exception handling statistics
- History management including users, inspection results, and exception handling
-
Report
- Issue inspection results in a visible report
Special Features
-
Operation by affiliate
- Support for separate operation of one portal for each affiliate
-
Open source review
- Checks applications, containers, and even servers
- Automates licensing requirements by deployment type
- Automates issuance of license notices
-
Inspection Automation
- Supports automatic inspection by linking with CI/CD such as Jenkins
-
Black Duck Linkage
- Producing the best inspection results by linking with Blackduck, the world's No. 1 open source inspection tool
-
Open source automatic import
- Automatic import of open source through portal even in closed network environment
-
Operating an internal open source repository
- Support for linking to repositories during builds such as Maven
- Support for sharing and individual use of imported open source files
-
Provides various certifications
- Supports ID/PW, OAuth2, SAML, SSO, and LDAP integration