About This Project
What is Trusted OSS?
Trusted OSS is a practical toolkit designed to help you complete self-certification for ISO/IEC 5230 (license compliance) and ISO/IEC 18974 (security assurance) from start to finish.
Even practitioners with no prior open source governance experience can follow the Claude Code Agent guidance to progressively produce policies, organizational setup, processes, SBOMs, training materials, and certification deliverables.
Built by OpenChain KWG
This project was created by OpenChain KWG (OpenChain Korea Work Group).
OpenChain KWG is the Korean working group of the Linux Foundation OpenChain Project, which leads the ISO/IEC 5230 international standard. It operates guides, tools, and a community to improve open source compliance capabilities for companies in Korea.
License
All content on this site is released under the CC BY 4.0 license.
With proper attribution, you can freely copy, modify, redistribute, and use it commercially.
Attribution example: "Trusted OSS (CC BY 4.0 · OpenChain KWG)"
How to Contribute
All contributions are welcome, including typo fixes, content improvements, and new sample additions.
- GitHub: github.com/trustedoss — issues or pull requests
- Community: OpenChain KWG — quarterly meetings and a mailing list