Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .github/config/wordlist.txt
Original file line number Diff line number Diff line change
Expand Up @@ -77,6 +77,7 @@ creds
crossplatform
crypto
cryptographic
cryptographically
cta
ctf
ctfs
Expand Down
25 changes: 14 additions & 11 deletions content/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -32,18 +32,21 @@ how_ocm_works:
benefits_title: "Why Choose OCM?"
benefits:
- emoji: "📦"
title: "One Model for All Artifacts"
description: "A unified, machine-readable format for everything you deliver."
title: "Create a Software Bill of Delivery"
description: "Gain visibility into everything you deliver — from container images to configuration files."
- emoji: "🔒"
title: "Security & Integrity"
description: "Component-level signatures that verify everything. Ironclad provenance at every step."
title: "Protect Your Supply Chain"
description: "Secure the integrity and provenance of your software with built-in signing and verification."
- emoji: "🌐"
title: "Universal Delivery"
description: "Deploy anywhere: public, on-prem, air-gapped. Cross-boundary transfers without compromise."
- emoji: "🔗"
title: "End-to-End Traceability"
description: "OCM Coordinates connect all lifecycle phases. One global view for visibility from build to deployment."
title: "Deploy Anywhere, Even Air-Gapped"
description: "Deliver across any system or environment without loosing traceability."
- emoji: "⚙️"
title: "GitOps-Ready Automation"
description: "Integrate your pipelines through OCM tooling. Zero custom code needed — just plug and play"
title: "Works with Your Existing Tools"
description: "OCM fits seamlessly into your current ecosystem and workflows."
- emoji: "🔧"
title: "Adapts to Your Needs"
description: "OCM's functionality is easy to extend. Just plug in what you need."
- emoji: "🤝"
title: "Committed to Open Source"
description: "We champion open innovation — in OCM and across the community."
---
49 changes: 49 additions & 0 deletions content/docs/overview/benefits.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,49 @@
---
title: "Benefits of OCM"
description: "Security for your software supply chain"
icon: "✨"
weight: 12
toc: true
---

The Open Component Model (OCM) is an open-source toolset for secure software delivery.

- OCM gives you full visibility and control across the supply chain, streamlining compliance checks, security scans, and deployments.
- OCM works everywhere — cloud, on-premises, hybrid, and air-gapped environments.
- OCM integrates seamlessly with your existing tools and is easy to extend.

With OCM, you gain control, reduce risk, and keep your delivery approach adaptable.

## Why choose OCM

### Create a Software Bill of Delivery

With OCM, you can describe everything you deliver in a unified, machine-readable format. This enables you to create a *Software Bill of Delivery (SBoD)*. Unlike a Software Bill of Materials (SBOM), which lists all components inside an application, a **Software Bill of Delivery** focuses on **everything you need for a successful deployment** — including container images, Helm charts, configuration files, and binaries. It is a complete, verifiable record of **all deliverables and how to access them**.

### Protect Your Supply Chain

Security is built into OCM. You can **cryptographically sign and verify** every component in your supply chain to ensure its integrity or confirm its provenance.

Beyond signatures, OCM uses [**immutable, globally unique component identities**]({{<relref "coordinates.md">}}). These act like tracking IDs, linking all lifecycle phases. They make compliance checks, audits, and vulnerability scans easier and more reliable. With OCM, your software is fully traceable from build to deployment.

### Deploy Anywhere, Even Air-Gapped

You can **deliver across boundaries** and **deploy anywhere — public cloud, on-premises, or air-gapped environments**. OCM separates the identity of software artifacts from their location. Identities remain stable while locations can change as needed. You can store software artifacts in local registries, move them between systems, and work in environments with limited or no internet access — all without losing integrity or traceability.

### Works with Your Existing Tools

OCM seamlessly integrates with your current ecosystem. It is **compatible with any implementation technology**, whether container images, NPM packages, or binaries. You can manage both cloud-native and legacy software without rewriting existing tools or processes.

### Adapts to Your Needs

OCM is built for flexibility. Its **plugin system** lets you extend functionality without changing the core. You can integrate new technologies, customize workflows, and scale from small teams to enterprise environments. OCM ensures that your supply chain remains agile and future-proof.

### Committed to Open Source

OCM has open development and transparent governance. We welcome contributions of any kind. The design of OCM makes it easy to add new features, so anyone can suggest, review, and merge improvements in a transparent way.

Our commitment to open source goes beyond OCM. We are active members of the open-source community and have maintainers in projects such as [kro](https://kro.run/), [Flux](https://fluxcd.io/), and [External Secrets Operator](https://external-secrets.io/latest/). We believe in open source and work to shape its future.

## Try OCM Out

Does OCM sound like the right fit for your project? Check out our [Getting Started]({{<relref "getting-started">}}) guides to see how easy a secure delivery can be.
100 changes: 0 additions & 100 deletions content/docs/overview/challenge.md

This file was deleted.

Loading