diff --git a/OAT.xml b/OAT.xml
new file mode 100644
index 0000000000000000000000000000000000000000..7677144cc855025429ff1df558c16f483ea0de94
--- /dev/null
+++ b/OAT.xml
@@ -0,0 +1,141 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!-- Copyright (c) 2021 Huawei Device Co., Ltd.
+
+     Licensed under the Apache License, Version 2.0 (the "License");
+     you may not use this file except in compliance with the License.
+     You may obtain a copy of the License at
+
+          http://www.apache.org/licenses/LICENSE-2.0
+
+     Unless required by applicable law or agreed to in writing, software
+     distributed under the License is distributed on an "AS IS" BASIS,
+     WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+     See the License for the specific language governing permissions and
+     limitations under the License.
+
+    This is the configuration file template for OpenHarmony OSS Audit Tool, please copy it to your
+project root dir and modify it refer to OpenHarmony/tools_oat/README.
+    All configurations in this file will be merged to OAT-Default.xml, if you have any questions or
+concerns, please create issue in OpenHarmony/tools_oat and @jalenchen or chenyaxun.
+
+    licensefile:
+    1.If the project don't have "LICENSE" in root dir, please define all the license files in this
+project in , OAT will check license files according to this rule.
+
+    policylist:
+    1. policy: If the OAT-Default.xml policies do not meet your requirements, please add policies here.
+    2. policyitem: The fields type, name, path, desc is required, and the fields rule, group,
+filefilter is optional,the default value is:
+    <policyitem type="" name="" path="" desc="" rule="may" group="defaultGroup"
+filefilter="defaultPolicyFilter"/>
+    3. policyitem type:
+        "compatibility" is used to check license compatibility in the specified path;
+        "license" is used to check source license header in the specified path;
+        "copyright" is used to check source copyright header in the specified path;
+        "import" is used to check source dependency in the specified path, such as import ... ,include ...
+        "filetype" is used to check file type in the specified path, supported file types: archive, binary
+        "filename" is used to check whether the specified file exists in the specified path(projectroot
+means the root dir of the project), supported file names: LICENSE, README, README.OpenSource
+    4. policyitem name: This field is used for define the license, copyright, "*" means match all, the
+"!" prefix means could not match this value. For example, "!GPL" means can not use GPL license.
+    5. policyitem path: This field is used for define the source file scope to apply this policyitem,
+the "!" prefix means exclude the files. For example, "!.*/lib/.*" means files in lib dir will be
+exclude while process this policyitem.
+    6. policyitem rule and group: These two fields are used together to merge policy results. "may"
+policyitems in the same group means any one in this group passed, the result will be passed.
+    7. policyitem filefilter: Used to bind filefilter which define filter rules.
+    7. policyitem desc: Used to describe the reason of this policy item, committers will check this
+while merging the code.
+    8. filefilter: Filter rules, the type filename is used to filter file name, the type filepath is
+used to filter file path.
+
+    Note:If the text contains special characters, please escape them according to the following rules:
+    " == &quot;
+    & == &amp;
+    ' == &apos;
+    < == &lt;
+    > == &gt;
+-->
+
+<configuration>
+    <oatconfig>
+        <policylist>
+            <policy name="projectPolicy" desc="">
+                <policyitem type="compatibility" name="Boost Original" path="third_party/agg23.*" desc="经法务确认经法务确认为宽松型许可证" />
+                <policyitem type="compatibility" name="Libpng" path="third_party/libpng16.*" desc="经法务确认经法务确认为宽松型许可证" />
+                <policyitem type="compatibility" name="libtiff" path="third_party/libtiff.*" desc="经法务确认经法务确认为宽松型许可证" />
+                <policyitem type="compatibility" name="OFL-1.1-no-RFN" path="third_party/NotoSansCJK/LICENSE" desc="经法务确认经法务确认为宽松型许可证" />
+                <policyitem type="compatibility" name="FTL" path="third_party/freetype/include/pstables.h" desc="经法务确认经法务确认为宽松型许可证" />
+                <policyitem type="compatibility" name="FTL" path="third_party/freetype/include/freetype-custom-config/ftoption.h" desc="经法务确认经法务确认为宽松型许可证" />
+                <policyitem type="compatibility" name="FTL" path="third_party/freetype/FTL.TXT" desc="经法务确认经法务确认为宽松型许可证" />
+            </policy>
+        </policylist>
+        <filefilterlist>
+            <filefilter name="defaultPolicyFilter"  desc="Filters for compatibility,license header policies">
+                <filteritem type="filename" name="*.pdfium" desc="chromium原生文件无license" />
+                <filteritem type="filepath" name="third_party/pymock/mock.py" desc="chromium原生文件无license" />
+                <filteritem type="filepath" name="third_party/libpng16/LICENSE" desc="chromium原生文件无license" />
+                <filteritem type="filepath" name="third_party/fuchsia-sdk/README.chromium" desc="chromium原生文件无license" />
+            </filefilter>
+            <filefilter name="readmeOpenSourcefileNamePolicFilter">
+                <filteritem type="filepath" name="README.OpenSource" desc="Filter readme.opensource files" />
+            </filefilter>
+            <filefilter name="binaryFileTypePolicyFilter" desc="Check to see if it is a binary file">
+                <filteritem type="filename" name="*.pdf" desc="chromium原生二进制文件,不会使用" />
+                <filteritem type="filename" name="*.png" desc="chromium原生二进制文件,不会使用" />
+                <filteritem type="filename" name="*.jpg" desc="chromium原生二进制文件,不会使用" />
+                <filteritem type="filepath" name="testing/resources/bug_1469.jp2" desc="chromium原生二进制文件,不会使用" />
+                <filteritem type="filepath" name="testing/resources/hint_table_102p.bin" desc="chromium原生二进制文件,不会使用" />
+                <filteritem type="filepath" name="third_party/NotoSansCJK/NotoSansSC-Regular.subset.otf" desc="chromium原生二进制文件,不会使用" />
+                <filteritem type="filepath" name="testing/resources/.*ttf" desc="chromium原生二进制文件,不会使用" />
+                <filteritem type="filepath" name="testing/resources/.*jpf" desc="chromium原生二进制文件,不会使用" />
+                <filteritem type="filepath" name="testing/resources/.*jp2" desc="chromium原生二进制文件,不会使用" />
+            </filefilter>
+        </filefilterlist>
+        <licensematcherlist>
+            <licensematcher name="Boost Original" desc="">
+                <licensetext name="
+                // Permission to copy, use, modify, sell and distribute this software
+                // is granted provided this copyright notice appears in all copies.
+                // This software is provided &quot;as is&quot; without express or implied
+                // warranty, and with no claim as to its suitability for any purpose.
+            " desc="" />
+            </licensematcher>
+            <licensematcher name="libtiff" desc="">
+                <licensetext name="
+                * Permission to use, copy, modify, distribute, and sell this software and
+                * its documentation for any purpose is hereby granted without fee, provided
+                * that (i) the above copyright notices and this permission notice appear in
+                * all copies of the software and related documentation, and (ii) the names of
+                * Sam Leffler, Greg Larson and Silicon Graphics may not be used in any
+                * advertising or publicity relating to the software without the specific,
+                * prior written permission of Sam Leffler, Greg Larson and Silicon Graphics.
+            " desc="" />
+                <licensetext name="
+                * Permission to use, copy, modify, distribute, and sell this software and
+                * its documentation for any purpose is hereby granted without fee, provided
+                * that (i) the above copyright notices and this permission notice appear in
+                * all copies of the software and related documentation, and (ii) the names of
+                * Pixar, Sam Leffler and Silicon Graphics may not be used in any advertising or
+                * publicity relating to the software without the specific, prior written
+                * permission of Pixar, Sam Leffler and Silicon Graphics.
+            " desc="" />
+            </licensematcher>
+            <licensematcher name="BSD-3-Clause" desc="">
+                <licensetext name="
+                Name: mock
+                URL: http://pypi.python.org/pypi/mock
+                Version: 1.0.1
+                Security Critical: no
+                License: BSD
+                License File: NOT_SHIPPED
+                Description:
+                Python mock library, currently used by native_client_sdk.  This is the
+                same mock library that is now part of python 3.3 where it is know as
+                unittest.mock..
+            " desc="" />
+            </licensematcher>
+        </licensematcherlist>
+    </oatconfig>
+</configuration>
diff --git a/README.OpenSource b/README.OpenSource
new file mode 100644
index 0000000000000000000000000000000000000000..ff6d706a4419e081c179bd7da8793d5d0bf116c1
--- /dev/null
+++ b/README.OpenSource
@@ -0,0 +1,11 @@
+[
+    {
+        "Name": "pdfium",
+        "License":"BSD-3-Clause",
+        "License File":"LICENSE",
+        "Version Number": "e08973f07eac840c09b8bfa7a75d2df56d015d88",
+        "Owner": "huangjiewen2@huawei.com",
+        "Upstream URL": "https://chromium.googlesource.com/pdfium.git@e08973f07eac840c09b8bfa7a75d2df56d015d88",
+        "Description": "PDF 渲染引擎"
+    }
+]
\ No newline at end of file