spdx@lists.spdx.org

Home Messages Hashtags Subgroups

Messages

Between

and

Re: [spdx-tech] Registration open for SPDX DocFest on Jan 27th

Rose, Where can I find the target set objects to create/submit an SPDX SBOM? Thanks, Dick Brooks Never trust software, always verify and report!

By Dick Brooks · #1493 ·

Registration open for SPDX DocFest on Jan 27th

Hello SPDX community, SPDX is hosting another DocFest on January 27th from 7-11 AM PST. The purpose of this event is to bring together producers and consumers of SPDX documents and discuss

By Rose Judge · #1492 ·

Re: Archive the https://github.com/spdx/license-list repository

Thanks Gary. -- Sebastian Schuberth

By Sebastian Schuberth · #1491 ·

Re: Archive the https://github.com/spdx/license-list repository

Hi Sebastian and SPDX community, I just archived the license-list repo per your suggestion. If there are any concerns, let me know. We can always unarchive the repository. I also archived and

By Gary O'Neall · #1490 ·

Archive the https://github.com/spdx/license-list repository

Hi all, while the README at [1] documents the https://github.com/spdx/license-list repo to be archived, it's not "archived" in the GitHub sense, as available in the settings

By Sebastian Schuberth · #1489 ·

Thursday's SPDX General Meeting Reminder

NOTE: As mentioned last meeting, the General Meeting will adopt the practice of the SPDX teams for taking minutes. We will use Etherpad live in the meeting and others can contribute. This will be

By Phil Odence · #1488 ·

License Universe

Hi all, we recently published some insights on our license database. You can find details on https://github.com/org-metaeffekt/metaeffekt-universe and a visualization of the data on

By Karsten Klein · #1487 ·

SPDX December General Meeting Minutes

Also attached are slides from Adrian and Steve’s very interesting presentations. https://wiki.spdx.org/view/General_Meeting/Minutes/2021-12-02 General Meeting/Minutes/2021-12-02 < General

By Phil Odence · #1486 ·

Re: SPDX Company Membership

Phil, I just checked on REA’s LF membership status and it appears the lowest cost tier is $5,000 to become a LF member. Please confirm my understanding is correct that $5,000 is

By Dick Brooks · #1485 ·

SPDX Company Membership

Dear SPDX community, With the adoption of the new project governance model for SPDX in September, one new aspect of the updated structure is the introduction of the ability for companies and other

By Phil Odence · #1484 ·

SPDX Outreach Team report for December General Meeting

Dear all, Since we didn't have time at the SPDX General Meeting today for the usual team reports, I'm writing to send the Outreach Team's report in textual form! Feel free to reply if you have any

By Sebastian Crane · #1483 ·

Thursday's SPDX General Meeting Reminder

Hello, all, looking forward to seeing you Thursday. Note, we’ll have guest presentation from Microsoft on what they are doing with SPDX. Best, Phil GENERAL MEETING Meeting Time: Thurs,

By Phil Odence · #1482 ·

OpenChain Automation Case Study #5 - Running a Supply Chain using open source tooling + SPDX

Recording now available. Part #5 explores how SPDX ISO/IEC 5962 works as a Software Bill of Materials (SBOM) in the supply chain through existing open source tooling for open source

By Shane Coughlan · #1481 ·

REMINDER: SPDX in Virtual Supply Chain Webinar in 15 minutes (09:00 UTC)

REMINDER: OpenChain Automation Case Study showing SPDX Software Bill of Materials being used in a “virtual supply chain” @ 09:00 UTC. Join without registration

By Shane Coughlan · #1480 ·

REMINDER: Today is the Automation Case Study “virtual supply chain” showing code going through multiple scanners and maintaining SPDX integrity @ 09:00 UTC

REMINDER: Today is the OpenChain Automation Case Study “virtual supply chain” showing code going through multiple scanners and maintaining SPDX integrity @ 09:00 UTC. We will hold it on

By Shane Coughlan · #1479 ·

Re: Taxonomy of software supply chain ecosystem?

Hi Vicky We also have a nice website https://oss-compliance-tooling.org/ Perhaps this is better suited for getting an overview Ciao Oliver

By Oliver Fendt · #1478 ·

Re: Taxonomy of software supply chain ecosystem?

You may also want to look at the SLSA framework. https://slsa.dev/levels --- Mike Dolan The Linux Foundation Office: +1.330.460.3250 Cell: +1.440.552.5322 mdolan@... ---

By Michael Dolan · #1477 ·

Re: Taxonomy of software supply chain ecosystem?

Yessssss… It’ll take a while to get through it all, but this will be very helpful for us. Many thanks, Steve and Tooling Group Team! --V -- VM (Vicky) Brasseur Director, Senior

By VM (Vicky) Brasseur · #1476 ·

Re: Taxonomy of software supply chain ecosystem?

Hi Vicky, There's been some great work in the OSS Compliance Tooling Group which addresses this – if you're asking what I think you're asking. See:

By Steve Kilbane · #1475 ·

Re: Taxonomy of software supply chain ecosystem?

There's been some industry wide agreement on the taxonomy to use to classify tools here: https://www.ntia.gov/files/ntia/publications/ntia_sbom_tooling_taxonomy-2021mar30.pdf I think the path of

By Kate Stewart · #1474 ·

201 - 220 of 1693

Home Hashtags Subgroups Terms