SPDX DocFest followup - what makes a quality SBOM?
|
Rose Judge
Reminder that our discussion around “What makes a quality SBOM” is happening tomorrow! I hope you can make it 😊
8am PST/11am EST/5pm CEST. Use https://meet.jit.si/SPDXImplementersMeeting to join. Notes are recorded here.
From:
Rose Judge <rjudge@...> Hello DocFest participants,
To continue the great conversation started at the most recent DocFest I would like to invite you all to attend the SPDX Implementers call which takes place every other Wednesday at 8am PST/11am EST/5pm CEST. The next meeting will take place on January 11th.
In the next call, specifically, I would like to start a discussion around “What makes a quality SBOM?”. This is a topic that is actively being discussed in a few communities and one that would be great for SPDX to provide guidance around (ideally, as some sort of appendix in the spec).
Starting in February, we would also like to use the Implementers call to finish discussing some of the topics that we didn’t get around to at the DocFest. You can subscribe to meeting invites here. We use Jitsi to meet (https://meet.jit.si/SPDXImplementersMeeting) and notes are recorded here.
If you have any questions or the meeting time is difficult for you, please reach out. I hope to see you at the next meeting and beyond!
-Rose |
|
|
|
Rose,
Can you please send a meeting invite for this meeting so that I can add to my calendar.
Thanks,
Dick Brooks
Active Member of the CISA Critical Manufacturing Sector, Sector Coordinating Council – A Public-Private Partnership
Never trust software, always verify and report! ™ http://www.reliableenergyanalytics.com Email: dick@... Tel: +1 978-696-1788
From: spdx-implementers@... <spdx-implementers@...> On Behalf Of Rose Judge via lists.spdx.org
Sent: Tuesday, January 10, 2023 5:58 PM To: spdx-implementers@... Subject: Re: [spdx-implementers] SPDX DocFest followup - what makes a quality SBOM?
Reminder that our discussion around “What makes a quality SBOM” is happening tomorrow! I hope you can make it 😊
8am PST/11am EST/5pm CEST. Use https://meet.jit.si/SPDXImplementersMeeting to join. Notes are recorded here.
From: Rose Judge <rjudge@...> Hello DocFest participants,
To continue the great conversation started at the most recent DocFest I would like to invite you all to attend the SPDX Implementers call which takes place every other Wednesday at 8am PST/11am EST/5pm CEST. The next meeting will take place on January 11th.
In the next call, specifically, I would like to start a discussion around “What makes a quality SBOM?”. This is a topic that is actively being discussed in a few communities and one that would be great for SPDX to provide guidance around (ideally, as some sort of appendix in the spec).
Starting in February, we would also like to use the Implementers call to finish discussing some of the topics that we didn’t get around to at the DocFest. You can subscribe to meeting invites here. We use Jitsi to meet (https://meet.jit.si/SPDXImplementersMeeting) and notes are recorded here.
If you have any questions or the meeting time is difficult for you, please reach out. I hope to see you at the next meeting and beyond!
-Rose |
|
|
