--- title: "Resource Library | FOSSA" description: "Access whitepapers, case studies, guides, and more resources about software supply chain security, license compliance, and open source management." canonical_url: "https://fossa.com/resource-library/" markdown_url: "https://fossa.com/resource-library.md" language: "en" author: "FOSSA" organization: "FOSSA" --- # Resource Library | FOSSA > Access whitepapers, case studies, guides, and more resources about software supply chain security, license compliance, and open source management. ## Resource Library Discover guides, whitepapers, and tools to help you master software supply chain management. ### Featured [#### Vulnerability Prioritization: An Insider’s Guide to the EPSS Scoring System WebinarsExternal](https://www.youtube.com/watch?v=hnlf2lP0Msc) [#### Software Composition Analysis: Elements of an Effective Solution Reports](https://fossa.com/resource-library/software-composition-analysis-elements-effective-solution.md) [#### AI Coding Tools, Copyright Law, and OSS License Compliance, Featuring Heather Meeker Featuring Heather Meeker WebinarsExternal](https://fossa.zoom.us/rec/share/DZRVPBjPZ4ax4NHyGqxxBpAa7h3AWdanNZx4VxKrLvGUtXGCO_u8CLoGGbD1fBVZ.CQ2s9EjoTfCXDZGy?startTime=1761156019000) ### Latest [#### Allan Friedman on SBOMs in Financial Services: PCI DSS, DORA, and More Featuring Allan Friedman WebinarsExternal](https://fossa.zoom.us/webinar/register/WN_0iw41n-NSGajzN7brY7F9A) [#### A Practical Guide to VEX in 2026, with Allan Friedman Featuring Allan Friedman WebinarsExternal](https://fossa.zoom.us/webinar/register/WN_8kwUCZDfRz2nTtZ9XhW5IQ#/registration) [#### Managing Security and Regulatory Compliance for C/C++: A Pragmatic Approach Featuring Cortez Frazier Jr. WebinarsExternal](https://www.youtube.com/watch?v=ZNtWzlDszJY) [#### CycloneDX SBOM Format Interactive Guides](https://fossa.com/learn/cyclonedx.md) [#### SPDX SBOM Format Interactive Guides](https://fossa.com/learn/spdx.md) [#### Software Bill of Materials (SBOM) Interactive Guides](https://fossa.com/learn/sboms.md) ### More Resources [#### Android Open Source Security Interactive Guides](https://fossa.com/learn/android-open-source.md) [#### Open Source Licenses Guide Interactive Guides](https://fossa.com/learn/open-source-licenses.md) [#### SBOM Compliance Requirements Interactive Guides](https://fossa.com/learn/sbom-compliance-requirements.md) [#### Software Composition Analysis (SCA) Interactive Guides](https://fossa.com/learn/software-composition-analysis.md) [#### Software Supply Chain Security Interactive Guides](https://fossa.com/learn/software-supply-chain-security.md) [#### Open Source License Security in Automotive Interactive Guides](https://fossa.com/learn/open-source-license-security-automotive) [#### Developer's Guide to Open Source Software Licenses Interactive Guides](https://fossa.com/learn/developers-guide-open-source-software-licenses.md) [#### 7 Steps for IPO Due Diligence and Open Source Compliance: From Mutual NDAs to the IPO Roadshow Infographics](https://fossa.com/resource-library/7-steps-for-ipo-due-diligence-and-open-source-compliance.md) [#### 7 Steps for M&A Due Diligence and Open Source Compliance Infographics](https://fossa.com/resource-library/7-steps-for-m-a-due-diligence-and-open-source-compliance.md) [#### A New Wave of IP Risks: How Open Source is Changing IP Risk in the Software Supply Chain Whitepapers](https://fossa.com/resource-library/a-new-wave-of-ip-risks.md) [#### Adopting Haskell into an Existing Codebase Podcasts](https://fossa.com/blog/fossa-podcast-adopting-haskell.md) [#### An Insider’s Guide to SPDX WebinarsExternal](https://www.youtube.com/watch?v=RJ1gzg5tfq4) [#### Auditing Your Company's Use of Open Source: Checklist for Creating an Open Source Compliance Program Checklists](https://fossa.com/resource-library/auditing-your-companys-use-of-open-source.md) [#### Automating Open Source License Compliance Essentials WebinarsExternal](https://www.youtube.com/watch?v=pkX2WcDXTA8) [#### Building the Foundation of Your SBOM and VEX Programs WebinarsExternal](https://www.youtube.com/watch?v=J5vBRqflriA) [#### Common SBOM Challenges and How to Solve Them WebinarsExternal](https://www.youtube.com/watch?v=17u69FCk_RQ) [#### Compliance with the GPLv3 “User Products” Clause and the Impact of SFC v. Vizio WebinarsExternal](https://www.youtube.com/watch?v=HlIRWHY1bxU) [#### Customizing Your Open Source Compliance Policy, Featuring Heather Meeker WebinarsExternal](https://www.youtube.com/watch?v=Gf3_8OA1bqs) [#### Early-Stage Technology Decisions and Regrets Podcasts](https://fossa.com/blog/fossa-podcast-early-stage-technology-decisions-and-regrets.md) [#### Evaluating Compliance Technology Checklists](https://fossa.com/resource-library/evaluating-compliance-technology) [#### FOSSA: Open Source Management with Kevin Wang PodcastsExternal](https://softwareengineeringdaily.com/2019/11/06/fossa-open-source-management-with-kevin-wang/) [#### FOSSA vs. Blackduck by Synopsys Checklists](https://fossa.com/resource-library/fossa-vs-blackduck-by-synopsys) [#### FOSSA vs. WhiteSource Checklists](https://fossa.com/resource-library/fossa-vs-whitesource.md) [#### Generating, Importing, and Managing SBOMs with FOSSA WebinarsExternal](https://www.youtube.com/watch?v=o_PjezNUL24) [#### Heather Meeker on OSS Compliance: Demystifying License Notices with Automation WebinarsExternal](https://www.youtube.com/watch?v=Dp_xqzOlaFo) [#### How Applause Does Open Source Compliance and Security the Developer's Way WebinarsExternal](https://www.youtube.com/watch?v=uvlgym7xxBQ) [#### How Kodiak Robotics Automates Open Source Management WebinarsExternal](https://www.youtube.com/watch?v=N4SNaQ_p19Y) [#### How Rancher Labs Increased Development Efficiency and Security with FOSSA WebinarsExternal](https://www.youtube.com/watch?v=HAWg4h2-h84) [#### Legal Compliance for Modern Software Development WebinarsExternal](https://www.youtube.com/watch?v=8-e0IguHPsA) [#### Live Panel: Simplifying OSS Compliance in the Automotive Industry WebinarsExternal](https://www.youtube.com/watch?v=gDoEUYU5OUw) [#### Managing Engineering Projects Podcasts](https://fossa.com/blog/fossa-podcast-managing-engineering-projects.md) [#### Modernize Your Open Source Audits: 5 Reasons Spreadsheets Fail for Managing OSS Licenses Whitepapers](https://fossa.com/resource-library/modernize-your-open-source-audits.md) [#### NIS2 Directive: Understanding and Complying with Supply Chain Security Guidance WebinarsExternal](https://www.youtube.com/watch?v=8e4xM888eFA) [#### Open Source Management for Automotive Companies Infographics](https://fossa.com/resource-library/open-source-management-for-automotive-companies) [#### OSS License Compliance: Bridging the Legal-Engineering Divide WebinarsExternal](https://www.youtube.com/watch?v=JY8RKE42Fys) [#### SCA Purchasing and Implementation Trends Podcasts](https://fossa.com/blog/fossa-podcast-sca-purchasing-implementation-trends.md) [#### Sentry’s Software Licensing Journey — And Why It Matters for You WebinarsExternal](https://www.youtube.com/watch?v=d2Y4jnZtZsk) [#### Structuring and Growing a Customer Success Team Podcasts](https://fossa.com/blog/fossa-podcast-structuring-growing-customer-success-team.md) [#### The Dos and Don'ts of SBOMs for Security WebinarsExternal](https://www.youtube.com/watch?v=Afmo0FIdyic) [#### The Lawyer's Guide to a Comprehensive Open Source Compliance Program WebinarsExternal](https://youtu.be/-VtMcWqljWQ) [#### The Lawyer’s Guide to OSS License Compliance Tools, Featuring Heather Meeker WebinarsExternal](https://www.youtube.com/watch?v=24IQV6bIbWE) [#### Truth Social, AGPL, and OSS License Compliance WebinarsExternal](https://youtu.be/3uP8zmneoDY) [#### Understanding and Using the CycloneDX SBOM Standard WebinarsExternal](https://www.youtube.com/watch?v=CD_ZDGtoP2Y) [#### When "Open Source" Isn’t Open Source, Featuring Heather Meeker WebinarsExternal](https://www.youtube.com/watch?v=S3I3OXc1RUc) ## Source Canonical page: https://fossa.com/resource-library/