Understand SBOMs
Disuko consumes existing Software Bills of Materials and makes their components available for further assessment.
Eclipse Foundation project
Open-source governance that remains transparent.
Eclipse Disuko helps organisations assess open-source components in their software supply chain in a structured way. It focuses on existing SBOMs, transparent policies and a dependable basis for decisions.
What it addresses
From software bill of materials to informed decisions.
Apply policies
Licences and policies can be assessed against an organisation’s own use cases. This turns technical information into transparent decisions.
Establish governance
The platform helps teams go beyond recording open source and integrate evaluation into their software supply chain and ways of working.
Open collaboration
An Eclipse project for professional open-source governance.
Disuko is developed openly as an official Eclipse Foundation project. Its project page and source code provide insight into development, contribution and current progress.
Ask about DisukoIntroduction and operations
Establish Disuko effectively in your organisation.
Good open-source governance requires more than a tool. It needs fitting processes, clear roles and a technical integration that matches the existing environment.
Local introduction and installation
I support architecture, installation and configuration in your infrastructure - including alignment with identities, permissions, networks and operational requirements.
Integration into existing workflows
Together, we connect SBOM sources, policies and assessments with the tools and approval processes already used by your engineering team.
Managed service for customers
Where operating it yourself is not the best fit, Disuko can be provided as a managed service. Hosting, updates and operations are agreed transparently; domain decisions and governance remain with you.