What are the advantages of integrating an Open Source and IP policy into a CI/CD system? How can the software and other IP licenses conundrum be solved and safely comply with the requirements and conditions of upstream Open Source licenses? Can I obtain a software bill of materials which I can use to comply with some of the requirements of the Cyber Resilience Act? Based on our experience providing this kind of service for the Eclipse Oniro operating system ‒ to the benefit of the adopting ODM's from the ecosystem ‒ we will provide a high-level overview of the required effort, potential timeline, potential stumbling blocks and relevant methods. .