Practice-Driven Compliance: ZTE Contributes to OpenChain CRA Checklist Rollout to Promote Security Governance for the Open Source Supply Chain

On 11 September 2026, the OpenChain Project hosted by the Linux Foundation officially released OpenChain CRA Compliance Checklist V1.0. ZTE Corporation actively participated in the review of this checklist, and put forward actionable recommendations based on its own compliance practices for the EU Cyber Resilience Act (CRA), which have been adopted into the official document.

The CRA imposes mandatory end-to-end cybersecurity requirements for all digital products placed on the EU market. The OpenChain CRA Compliance Requirements & Checklist provides a community-maintained readiness and self-assessment resource for CRA compliance, built upon the ISO/IEC international standards for open source governance under the OpenChain project.

In its internal CRA compliance implementation, ZTE has adopted this checklist as a reference to evaluate open source supply chain security and continuously refine its open source governance mechanisms. ZTE will keep focusing on open source software supply chain security, and stands ready to collaborate with industry partners worldwide to lift the overall trust and compliance level of global open source supply chains.

Link to the OpenChain CRA Compliance Checklist: https://github.com/OpenChain-Project/CRA-Compliance.