When:28 May 2025 (9:00 - 17:00 CEST)
Where:International Barcelona Convention Center
Barcelona, Catalunya, Spain
Registration:Registration for the hackathon is free, thanks to the generous support of the OWASP Foundation and Ecma International. For those interested in also attending the OWASP Global AppSec conference, separate registration is required. Registration to the conference is not required to attend the hackathon.

The Transparency Exchange API (TEA) is designed to make software transparency interoperable. It defines a secure, standardized way for systems to request and retrieve supply chain artifacts — like SBOMs, CBOMs, and attestations — across organizational boundaries.

As software supply chains grow more interconnected, TEA provides the missing link: a common language for exchanging trust. This hackathon is where we test that language in practice — validating the first beta of the TEA specification with real implementations and real feedback.

How We'll Work

This is a working session, not a competition. We're bringing together open source leaders, commercial vendors, and transparency advocates to test-drive Beta 1 of the TEA specification. You’ll collaborate, test, break, and refine — together.

We'll validate:

  • Can the API be implemented as designed?
  • Do use cases hold up under real-world conditions?
  • Are we enabling meaningful, actionable transparency?

CycloneDX is already standardized through Ecma. TEA is next. Your insights at this event will directly shape its trajectory.

What to Expect

  • Deep-dive on TEA Beta 1 and CycloneDX ecosystem
  • Hands-on working sessions with other engineers and architects
  • Opportunities to test cross-implementation interoperability
  • Transparent feedback loops to improve the specification

Whether you’re building tools, integrating SBOM workflows, or supporting standards adoption — this is your opportunity to contribute directly to the future of software transparency infrastructure.

Venue

The Centre de Convencions Internacional de Barcelona (CCIB) is one of Europe’s most modern and iconic event venues, located in the heart of Barcelona’s seafront innovation district. Known for its striking architecture and expansive, light-filled spaces, the CCIB hosts global conferences, exhibitions, and summits across technology, science, and business. It offers state-of-the-art facilities just steps from the Mediterranean, blending professional excellence with the vibrant energy of Barcelona.

Marker
Leaflet © OpenStreetMap contributors

Supporters

We’re grateful to the OWASP Foundation and Ecma International for their continued support and collaboration in shaping the future of software transparency.

OWASP Logo Ecma International Logo