📢 Today’s the day: The #CyberResilienceAct’s vulnerability reporting requirements are officially in effect across the EU.
Compliance is no longer optional. Is your organisation ready?
🔗 Learn more: orcwg.org/cra
#TechCompliance #ORCWG
Compliance is no longer optional. Is your organisation ready?
🔗 Learn more: orcwg.org/cra
#TechCompliance #ORCWG
September 11, 2026 at 11:45 AM
📢 Today’s the day: The #CyberResilienceAct’s vulnerability reporting requirements are officially in effect across the EU.
Compliance is no longer optional. Is your organisation ready?
🔗 Learn more: orcwg.org/cra
#TechCompliance #ORCWG
Compliance is no longer optional. Is your organisation ready?
🔗 Learn more: orcwg.org/cra
#TechCompliance #ORCWG
⚠️ One month until the #CyberResilienceAct’s first major deadline! Vulnerability reporting requirements kick in on 11 September 2026.
⏱️ If you haven’t started, this is your last chance to act: orcwg.org/cra
#CRA #ORCWG
⏱️ If you haven’t started, this is your last chance to act: orcwg.org/cra
#CRA #ORCWG
August 11, 2026 at 1:15 PM
⚠️ One month until the #CyberResilienceAct’s first major deadline! Vulnerability reporting requirements kick in on 11 September 2026.
⏱️ If you haven’t started, this is your last chance to act: orcwg.org/cra
#CRA #ORCWG
⏱️ If you haven’t started, this is your last chance to act: orcwg.org/cra
#CRA #ORCWG
RE: https://fosstodon.org/@orcwg/116873569423651488
Mejor nos vamos poniendo las pilas sobre la #cra, porque la regulación siempre es para tomársela en serio…
Mejor nos vamos poniendo las pilas sobre la #cra, porque la regulación siempre es para tomársela en serio…
fosstodon.org
July 6, 2026 at 9:12 PM
RE: https://fosstodon.org/@orcwg/116873569423651488
Mejor nos vamos poniendo las pilas sobre la #cra, porque la regulación siempre es para tomársela en serio…
Mejor nos vamos poniendo las pilas sobre la #cra, porque la regulación siempre es para tomársela en serio…
RE: https://fosstodon.org/@orcwg/116873569423651488
The next deadline for the #CRA is approaching, get ready now. Have a look at the training offer by our partner, the Eclipse Open Regulatory Compliance Working Group @orcwg .
The next deadline for the #CRA is approaching, get ready now. Have a look at the training offer by our partner, the Eclipse Open Regulatory Compliance Working Group @orcwg .
fosstodon.org
July 6, 2026 at 3:27 PM
RE: https://fosstodon.org/@orcwg/116873569423651488
The next deadline for the #CRA is approaching, get ready now. Have a look at the training offer by our partner, the Eclipse Open Regulatory Compliance Working Group @orcwg .
The next deadline for the #CRA is approaching, get ready now. Have a look at the training offer by our partner, the Eclipse Open Regulatory Compliance Working Group @orcwg .
🚦 We’re in the final stretch: 3 months until #CyberResilienceAct reporting requirements hit.
According to ONEKEY, 37% of companies see the 24-hour reporting rule as their number 1 challenge. Are you ready?
👉 Learn more: orcwg.org/cra
#CRA #ORCWG
According to ONEKEY, 37% of companies see the 24-hour reporting rule as their number 1 challenge. Are you ready?
👉 Learn more: orcwg.org/cra
#CRA #ORCWG
June 11, 2026 at 1:03 PM
🚦 We’re in the final stretch: 3 months until #CyberResilienceAct reporting requirements hit.
According to ONEKEY, 37% of companies see the 24-hour reporting rule as their number 1 challenge. Are you ready?
👉 Learn more: orcwg.org/cra
#CRA #ORCWG
According to ONEKEY, 37% of companies see the 24-hour reporting rule as their number 1 challenge. Are you ready?
👉 Learn more: orcwg.org/cra
#CRA #ORCWG
The ORC panel at #OCX26 explored how the #CRA is being implemented across different ecosystems. The discussion highlighted the complexity of aligning regulatory requirements with diverse technical environments.
🎥 Watch the recording: hubs.la/Q04fXP250
⭐ Read the highlights: hubs.la/Q04fXLkX0
#ORCWG
🎥 Watch the recording: hubs.la/Q04fXP250
⭐ Read the highlights: hubs.la/Q04fXLkX0
#ORCWG
May 18, 2026 at 12:01 PM
The ORC panel at #OCX26 explored how the #CRA is being implemented across different ecosystems. The discussion highlighted the complexity of aligning regulatory requirements with diverse technical environments.
🎥 Watch the recording: hubs.la/Q04fXP250
⭐ Read the highlights: hubs.la/Q04fXLkX0
#ORCWG
🎥 Watch the recording: hubs.la/Q04fXP250
⭐ Read the highlights: hubs.la/Q04fXLkX0
#ORCWG
What did Log4Shell teach us about securing open source?
Join the ORC WG on Monday to explore the lessons from Log4Shell and what a CRA-ready Log4j looks like.
📆 March 16 at 12 pm EDT
➕ Add to your calendar: buff.ly/GZ8m6Gv
#CRA #CyberResilience #opensource #ORCWG #log4j #CRAMondays
Join the ORC WG on Monday to explore the lessons from Log4Shell and what a CRA-ready Log4j looks like.
📆 March 16 at 12 pm EDT
➕ Add to your calendar: buff.ly/GZ8m6Gv
#CRA #CyberResilience #opensource #ORCWG #log4j #CRAMondays
March 12, 2026 at 3:20 PM
What did Log4Shell teach us about securing open source?
Join the ORC WG on Monday to explore the lessons from Log4Shell and what a CRA-ready Log4j looks like.
📆 March 16 at 12 pm EDT
➕ Add to your calendar: buff.ly/GZ8m6Gv
#CRA #CyberResilience #opensource #ORCWG #log4j #CRAMondays
Join the ORC WG on Monday to explore the lessons from Log4Shell and what a CRA-ready Log4j looks like.
📆 March 16 at 12 pm EDT
➕ Add to your calendar: buff.ly/GZ8m6Gv
#CRA #CyberResilience #opensource #ORCWG #log4j #CRAMondays
Log4Shell exposed how deeply #opensource runs through the global software supply chain.
Join the next #CRAMondays (March 16 at 12 pm EDT) to discuss the lessons—and what it takes to build a CRA-ready Log4j.
➕ Add to your calendar: bit.ly/3PuQozy
#CRA #CyberResilience #ORCWG #log4j
Join the next #CRAMondays (March 16 at 12 pm EDT) to discuss the lessons—and what it takes to build a CRA-ready Log4j.
➕ Add to your calendar: bit.ly/3PuQozy
#CRA #CyberResilience #ORCWG #log4j
March 10, 2026 at 8:35 PM
Log4Shell exposed how deeply #opensource runs through the global software supply chain.
Join the next #CRAMondays (March 16 at 12 pm EDT) to discuss the lessons—and what it takes to build a CRA-ready Log4j.
➕ Add to your calendar: bit.ly/3PuQozy
#CRA #CyberResilience #ORCWG #log4j
Join the next #CRAMondays (March 16 at 12 pm EDT) to discuss the lessons—and what it takes to build a CRA-ready Log4j.
➕ Add to your calendar: bit.ly/3PuQozy
#CRA #CyberResilience #ORCWG #log4j
Listen to me and Anthony summarising our experiences from EU Open Source Week and FOSDEM!
https://youtu.be/pRtKeRocoJ0
#SBOM #gvip #orcwg #fosdem
Join us for SBOM Focus in Stockholm Friday April 10, 2026
https://sbomfocus.eu
https://youtu.be/pRtKeRocoJ0
#SBOM #gvip #orcwg #fosdem
Join us for SBOM Focus in Stockholm Friday April 10, 2026
https://sbomfocus.eu
February 19, 2026 at 6:48 PM
Listen to me and Anthony summarising our experiences from EU Open Source Week and FOSDEM!
https://youtu.be/pRtKeRocoJ0
#SBOM #gvip #orcwg #fosdem
Join us for SBOM Focus in Stockholm Friday April 10, 2026
https://sbomfocus.eu
https://youtu.be/pRtKeRocoJ0
#SBOM #gvip #orcwg #fosdem
Join us for SBOM Focus in Stockholm Friday April 10, 2026
https://sbomfocus.eu
The Open Regulatory Compliance Working Group will be at Embedded World 2026!
🌐 Visit the #EclipseFdn booth 4-554 in hall 4 to dive deeper into how #ORCWG is driving meaningful change in the world of open source compliance.
#embeddedworld #ew26 #CRA
🌐 Visit the #EclipseFdn booth 4-554 in hall 4 to dive deeper into how #ORCWG is driving meaningful change in the world of open source compliance.
#embeddedworld #ew26 #CRA
February 11, 2026 at 10:21 PM
The Open Regulatory Compliance Working Group will be at Embedded World 2026!
🌐 Visit the #EclipseFdn booth 4-554 in hall 4 to dive deeper into how #ORCWG is driving meaningful change in the world of open source compliance.
#embeddedworld #ew26 #CRA
🌐 Visit the #EclipseFdn booth 4-554 in hall 4 to dive deeper into how #ORCWG is driving meaningful change in the world of open source compliance.
#embeddedworld #ew26 #CRA
At the #aboutcode SBOM tools workshop we talked about creating a way of continuing the discussions. I've just created a #SBOM-tools slack channel in the @orcwg space. Join us to discuss #SBOM tools and interoperability!
https://orcwg.org/participate/
#SBOM #cyclonedx #spdx #purl
https://orcwg.org/participate/
#SBOM #cyclonedx #spdx #purl
Get Involved in the Open Regulatory Compliance Working Group | Open Regulatory Compliance Working Group
The open source community is collaborating to establish common specifications for secure software development based on open source best practices.
orcwg.org
February 1, 2026 at 1:18 PM
At the #aboutcode SBOM tools workshop we talked about creating a way of continuing the discussions. I've just created a #SBOM-tools slack channel in the @orcwg space. Join us to discuss #SBOM tools and interoperability!
https://orcwg.org/participate/
#SBOM #cyclonedx #spdx #purl
https://orcwg.org/participate/
#SBOM #cyclonedx #spdx #purl
Starting #codencompliance community meeting organized by @orcwg … Really crowded room 🫣
@EclipseFdn #fosdem #cra
@EclipseFdn #fosdem #cra
January 29, 2026 at 8:44 AM
Starting #codencompliance community meeting organized by @orcwg … Really crowded room 🫣
@EclipseFdn #fosdem #cra
@EclipseFdn #fosdem #cra
Going to FOSDEM in Brussels next week? SBOM Europe will be there during the EU Open Source week
* The GVIP Summit
* ORCWG Code & Compliance
* Aboutcode workshop
* FOSDEM vulnerability BOF
* Security Devroom
* CRA Devroom
* SBOM Devroom
Let's meet!
* The GVIP Summit
* ORCWG Code & Compliance
* Aboutcode workshop
* FOSDEM vulnerability BOF
* Security Devroom
* CRA Devroom
* SBOM Devroom
Let's meet!
January 23, 2026 at 7:57 PM
Going to FOSDEM in Brussels next week? SBOM Europe will be there during the EU Open Source week
* The GVIP Summit
* ORCWG Code & Compliance
* Aboutcode workshop
* FOSDEM vulnerability BOF
* Security Devroom
* CRA Devroom
* SBOM Devroom
Let's meet!
* The GVIP Summit
* ORCWG Code & Compliance
* Aboutcode workshop
* FOSDEM vulnerability BOF
* Security Devroom
* CRA Devroom
* SBOM Devroom
Let's meet!
github.com/orcwg/orcwg/...
> Anyone who incorporates AI-generated code into their software today is often already acting with conditional intent – and making themselves vulnerable to claims for damages, injunctions, and even criminal consequences.
Yikes.
> Anyone who incorporates AI-generated code into their software today is often already acting with conditional intent – and making themselves vulnerable to claims for damages, injunctions, and even criminal consequences.
Yikes.
github.com
January 20, 2026 at 11:59 AM
github.com/orcwg/orcwg/...
> Anyone who incorporates AI-generated code into their software today is often already acting with conditional intent – and making themselves vulnerable to claims for damages, injunctions, and even criminal consequences.
Yikes.
> Anyone who incorporates AI-generated code into their software today is often already acting with conditional intent – and making themselves vulnerable to claims for damages, injunctions, and even criminal consequences.
Yikes.
github.com/orcwg/cra-hub
<< ...Everything you ever wanted to know about the CRA and its implementation... >>
<< ...Everything you ever wanted to know about the CRA and its implementation... >>
GitHub - orcwg/cra-hub: Everything you ever wanted to know about the CRA and its implementation
Everything you ever wanted to know about the CRA and its implementation - orcwg/cra-hub
github.com
December 2, 2025 at 12:28 PM
github.com/orcwg/cra-hub
<< ...Everything you ever wanted to know about the CRA and its implementation... >>
<< ...Everything you ever wanted to know about the CRA and its implementation... >>
The countdown is on!
Manufacturers have less than a year to comply with the #CyberResilienceAct’s vulnerability reporting requirements.
📘 Explore our resources to help your team prepare: orcwg.org/cra/
#CRA #CyberResilience #ORCWG
Manufacturers have less than a year to comply with the #CyberResilienceAct’s vulnerability reporting requirements.
📘 Explore our resources to help your team prepare: orcwg.org/cra/
#CRA #CyberResilience #ORCWG
November 11, 2025 at 9:45 AM
The countdown is on!
Manufacturers have less than a year to comply with the #CyberResilienceAct’s vulnerability reporting requirements.
📘 Explore our resources to help your team prepare: orcwg.org/cra/
#CRA #CyberResilience #ORCWG
Manufacturers have less than a year to comply with the #CyberResilienceAct’s vulnerability reporting requirements.
📘 Explore our resources to help your team prepare: orcwg.org/cra/
#CRA #CyberResilience #ORCWG
What is an #opensource software steward?
🌐 Open source software steward is a term defined in Article 3(14) of the CRA. However, the discussion on this topic is ongoing.
Check our ongoing #CRAFAQ discussion on GitHub and share your thoughts and contributions!
github.com/orcwg/cra-hu...
🌐 Open source software steward is a term defined in Article 3(14) of the CRA. However, the discussion on this topic is ongoing.
Check our ongoing #CRAFAQ discussion on GitHub and share your thoughts and contributions!
github.com/orcwg/cra-hu...
November 10, 2025 at 9:01 AM
What is an #opensource software steward?
🌐 Open source software steward is a term defined in Article 3(14) of the CRA. However, the discussion on this topic is ongoing.
Check our ongoing #CRAFAQ discussion on GitHub and share your thoughts and contributions!
github.com/orcwg/cra-hu...
🌐 Open source software steward is a term defined in Article 3(14) of the CRA. However, the discussion on this topic is ongoing.
Check our ongoing #CRAFAQ discussion on GitHub and share your thoughts and contributions!
github.com/orcwg/cra-hu...
🇮🇹 Happening this week in Bolzano! Join the #EclipseFdn sessions on 7 Nov:
📍How #ORCWG helps industry meet the #CRA (Francisco Carneiro)
📍Free of charge != cost-free (Carmen Delgado)
📍How Oniro builds seamless global smart ecosystems (Ignacio Ahedo)
pretix.eu/noi-digital/...
📍How #ORCWG helps industry meet the #CRA (Francisco Carneiro)
📍Free of charge != cost-free (Carmen Delgado)
📍How Oniro builds seamless global smart ecosystems (Ignacio Ahedo)
pretix.eu/noi-digital/...
November 3, 2025 at 11:01 AM
🇮🇹 Happening this week in Bolzano! Join the #EclipseFdn sessions on 7 Nov:
📍How #ORCWG helps industry meet the #CRA (Francisco Carneiro)
📍Free of charge != cost-free (Carmen Delgado)
📍How Oniro builds seamless global smart ecosystems (Ignacio Ahedo)
pretix.eu/noi-digital/...
📍How #ORCWG helps industry meet the #CRA (Francisco Carneiro)
📍Free of charge != cost-free (Carmen Delgado)
📍How Oniro builds seamless global smart ecosystems (Ignacio Ahedo)
pretix.eu/noi-digital/...
🤔 Can a solo maintainer be considered to be an #opensource software steward? What do you think?
Share your feedback on our CRA FAQ document: github.com/orcwg/cra-hu...
Share your feedback on our CRA FAQ document: github.com/orcwg/cra-hu...
October 29, 2025 at 10:12 AM
🤔 Can a solo maintainer be considered to be an #opensource software steward? What do you think?
Share your feedback on our CRA FAQ document: github.com/orcwg/cra-hu...
Share your feedback on our CRA FAQ document: github.com/orcwg/cra-hu...
I am NOT subject to the CRA, and want to make this clear to downstream users. What should I say?
Help answer this question in our CRA FAQ document.
Contribute to the discussion 👇
github.com/orcwg/cra-hu...
Help answer this question in our CRA FAQ document.
Contribute to the discussion 👇
github.com/orcwg/cra-hu...
cra-hub/faq/maintainers/transparency.md at main · orcwg/cra-hub
Everything you ever wanted to know about the CRA and its implementation - orcwg/cra-hub
github.com
October 23, 2025 at 9:02 AM
I am NOT subject to the CRA, and want to make this clear to downstream users. What should I say?
Help answer this question in our CRA FAQ document.
Contribute to the discussion 👇
github.com/orcwg/cra-hu...
Help answer this question in our CRA FAQ document.
Contribute to the discussion 👇
github.com/orcwg/cra-hu...
📢 Contribute to the FAQ on the Cyber Resilience Act (#CRA) and have an impact!
Some questions around open source projects, maintainers, stewards, or CRA standards are still being discussed. We need your input.
👉 Check out the CRA FAQ and share your feedback with us! github.com/orcwg/cra-hu...
Some questions around open source projects, maintainers, stewards, or CRA standards are still being discussed. We need your input.
👉 Check out the CRA FAQ and share your feedback with us! github.com/orcwg/cra-hu...
cra-hub/faq.md at main · orcwg/cra-hub
Everything you ever wanted to know about the CRA and its implementation - orcwg/cra-hub
github.com
October 17, 2025 at 9:14 AM
📢 Contribute to the FAQ on the Cyber Resilience Act (#CRA) and have an impact!
Some questions around open source projects, maintainers, stewards, or CRA standards are still being discussed. We need your input.
👉 Check out the CRA FAQ and share your feedback with us! github.com/orcwg/cra-hu...
Some questions around open source projects, maintainers, stewards, or CRA standards are still being discussed. We need your input.
👉 Check out the CRA FAQ and share your feedback with us! github.com/orcwg/cra-hu...
📅 Don't miss these @eclipse.org sessions on 7 Nov at #SFSCON:
📍How #ORCWG helps industry meet the #CRA - Francisco Carneiro
📍Free of charge != cost-free - @cldelgadop.bsky.social @adoptium.net
📍How Oniro builds seamless global smart ecosystems - Ignacio Ahedo
pretix.eu/noi-digital/...
📍How #ORCWG helps industry meet the #CRA - Francisco Carneiro
📍Free of charge != cost-free - @cldelgadop.bsky.social @adoptium.net
📍How Oniro builds seamless global smart ecosystems - Ignacio Ahedo
pretix.eu/noi-digital/...
October 15, 2025 at 9:09 AM
📅 Don't miss these @eclipse.org sessions on 7 Nov at #SFSCON:
📍How #ORCWG helps industry meet the #CRA - Francisco Carneiro
📍Free of charge != cost-free - @cldelgadop.bsky.social @adoptium.net
📍How Oniro builds seamless global smart ecosystems - Ignacio Ahedo
pretix.eu/noi-digital/...
📍How #ORCWG helps industry meet the #CRA - Francisco Carneiro
📍Free of charge != cost-free - @cldelgadop.bsky.social @adoptium.net
📍How Oniro builds seamless global smart ecosystems - Ignacio Ahedo
pretix.eu/noi-digital/...
Some more links to go further on CRA:
Open regulatory working group FAQ: github.com/orcwg/cra-hu...
openssf guides: openssf.org/resources/gu...
Linux Foundation CRA sie: linuxfoundation.eu/cyber-resili...
#kr2025
Open regulatory working group FAQ: github.com/orcwg/cra-hu...
openssf guides: openssf.org/resources/gu...
Linux Foundation CRA sie: linuxfoundation.eu/cyber-resili...
#kr2025
github.com
September 23, 2025 at 9:40 AM
Some more links to go further on CRA:
Open regulatory working group FAQ: github.com/orcwg/cra-hu...
openssf guides: openssf.org/resources/gu...
Linux Foundation CRA sie: linuxfoundation.eu/cyber-resili...
#kr2025
Open regulatory working group FAQ: github.com/orcwg/cra-hu...
openssf guides: openssf.org/resources/gu...
Linux Foundation CRA sie: linuxfoundation.eu/cyber-resili...
#kr2025
3 reasons to join Code & Compliance Community Day!
1️⃣ Understand how the #CRA is being implemented.
2️⃣ Learn how the ORCWG is translating policy into practice.
3️⃣ Access resources and connect with others, navigating CRA compliance.
See you in October! www.eclipse-foundation.events/event/Code-a...
1️⃣ Understand how the #CRA is being implemented.
2️⃣ Learn how the ORCWG is translating policy into practice.
3️⃣ Access resources and connect with others, navigating CRA compliance.
See you in October! www.eclipse-foundation.events/event/Code-a...
August 19, 2025 at 8:03 AM
3 reasons to join Code & Compliance Community Day!
1️⃣ Understand how the #CRA is being implemented.
2️⃣ Learn how the ORCWG is translating policy into practice.
3️⃣ Access resources and connect with others, navigating CRA compliance.
See you in October! www.eclipse-foundation.events/event/Code-a...
1️⃣ Understand how the #CRA is being implemented.
2️⃣ Learn how the ORCWG is translating policy into practice.
3️⃣ Access resources and connect with others, navigating CRA compliance.
See you in October! www.eclipse-foundation.events/event/Code-a...
The #CRA is facing mounting criticism from industry stakeholders, with some describing the situation as a “five‑alarm fire": redmonk.com/sogrady/2025...
Many unresolved questions raised by the CRA are being addressed at the ORC's FAQ: github.com/orcwg/cra-hu...
Many unresolved questions raised by the CRA are being addressed at the ORC's FAQ: github.com/orcwg/cra-hu...
August 16, 2025 at 10:28 AM
The #CRA is facing mounting criticism from industry stakeholders, with some describing the situation as a “five‑alarm fire": redmonk.com/sogrady/2025...
Many unresolved questions raised by the CRA are being addressed at the ORC's FAQ: github.com/orcwg/cra-hu...
Many unresolved questions raised by the CRA are being addressed at the ORC's FAQ: github.com/orcwg/cra-hu...