Open Component Model Deliver and deploy your software securely.

Anywhere, at any scale.

The Open Component Model (OCM) is your one-stop open-source Software Bill of Delivery (SBoD) for packaging, signing, transporting and deploying your artifacts – preserving end-to-end security, integrity and provenance.

Create a Software Bill of Delivery

Gain visibility into everything you deliver — from container images to configuration files.

Protect Your Supply Chain

Secure the integrity and provenance of your software with built-in signing and verification.

Deploy Anywhere, Even Air-Gapped

Deliver across any system or environment without losing traceability.

Works with Your Existing Tools

OCM fits seamlessly into your current ecosystem and workflows.

Adapts to Your Needs

OCM's functionality is easy to extend. Just plug in what you need.

Committed to Open Source

We champion open innovation — in OCM and across the community.