What if you got a second chance to build an Event Driven Provenance service? In this talk I will cover the decision to start over, rewrite, and Open Source the Event Driven system we built in house. In the process of covering the things we changed and the things we kept I tell a few war stories. Add in what needed to be improved and what we left behind. I will talk about our involvement in the CD Foundation and how the new system can leverage CDEvents and help with SBOM storage and retrieval. Demo and Discussion included dependent on time allotment.
Attendee Takeaways
Answers for the following questions:
- What does it take to open source in house tooling?
- What should I consider when open sourcing internal tooling?
- Why we made the choices we made to open source an internal project?
- What is an Event Driven Provenance Service?
- What is the CD Foundation?
- What is CDEvents?

30 minutes
The project https://github.com/sassoftware/event-provenance-registry