Name: ESSTRA: A Software Suite To Enhance Software Transparency and Traceability in Software Supply Chain - Takuya Namae, Sony Group Corporation
Start: 2025-08-25T16:30:00+0200
End: 2025-08-25T17:10:00+0200

25-27, August 2025
Amsterdam, Netherlands
View More Details & Registration
Note: The schedule is subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit Europe 2025 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Central European Summer Time, CEST (UTC +2). To see the schedule in your preferred timezone, please select from the drop-down menu to the right.

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.

Monday August 25, 2025 16:30 - 17:10 CEST

Elicium 1

When you use OSS, do you want to know which source files are compiled and included in the binaries? Project ESSTRA (https://github.com/sony/esstra) is a tool that collects a list of source files while compiling your software and embeds the data into the binaries.

Recently, the importance of using SBOMs has been increasing, and there is a growing demand for improved transparency and traceability in the software supply chain from the perspectives of vulnerability management and OSS license compliance. However, it is difficult to trace the details of which files are included in the binaries used in your product or service, and which OSS licenses to comply with based on this data.

To solve this issue, Sony has developed ESSTRA. It is available now as open source itself, and includes both a GCC plugin to record source files during a build and embed it into resulting binaries, as well as a tool to manage the information.

ESSTRA is already supported by Binary Analysis Next Generation (BANG) tool.

Attendees of this session will learn how to use ESSTRA and take the first steps to improve the transparency and traceability of your project's software.

Speakers

Takuya NAMAE

Open Source Compliance Tooling Lead, Sony Group Corporation

Takuya NAMAE is an Open Source Compliance Tooling Lead and Software Engineer in Sony Group Corporation. He works on OSS license compliance of Linux-based system software for various Sony products. He also leads the development of tools and workflows to efficiently carry out the continuous... Read More →

Monday August 25, 2025 16:30 - 17:10 CEST
Elicium 1

Embedded Linux Conference

Audience Experience Level Any

Open Source Summit Europe 2025

Takuya NAMAE

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!