[spdx-tech] Registration open for SPDX DocFest on Jan 27th


Dick Brooks
 

Rose,

 

Where can I find the target set objects to create/submit an SPDX SBOM?

 

 

From: Spdx-tech@... <Spdx-tech@...> On Behalf Of Rose Judge
Sent: Wednesday, January 12, 2022 11:39 AM
To: Spdx-tech@...; spdx@...
Subject: [spdx-tech] Registration open for SPDX DocFest on Jan 27th

 

Hello SPDX community,

 

SPDX is hosting another DocFest on January 27th from 7-11 AM PST. The purpose of this event is to bring together producers and consumers of SPDX documents and discuss differences between tool output and understanding for the same software artifacts. 


Specifically, the goals of this 
DocFest are to:
1) come to agreement on how the fields should be populated for a given artifact
2) identify instances where different use cases might lead to different choices for fields and structures of documents
3) assess how well the NTIA SBOM minimum elements are covered
4) create a set of reference SPDX SBOMs as part of the corpus for further tooling evaluation.

This event will require "sweat equity" – participants who can produce SPDX documents are expected to have generated at least one SPDX document from the target set (either source, built from source, built image or container equivalent). Participants who consume SPDX documents are expected to run at least two SPDX documents through their tooling and share any analysis results. Those who have signed up and have submitted files by January 21, 2022 will receive a meeting invite to the 
DocFest.

To indicate interest to participate, please fill in the following form:

https://forms.gle/Mq7ReinTY6gDL4cs9


Further details on how to participate will be mailed to those that have filled in the form. 

Thanks,
DocFest Organizers  (Rose, Gary, Kate)

 


Rose Judge
 

Hi Dick,

 

Instructions to participate with target sets/objects will be mailed out on Monday. We are finalizing the targets as we speak.  

 

Thanks for your interest and patience. Excited to have you as part of this event!

 

-Rose

From: Dick Brooks <dick@...>
Organization: Reliable Energy Analytics LLC
Reply-To: "dick@..." <dick@...>
Date: Wednesday, January 12, 2022 at 8:48 AM
To: Rose Judge <rjudge@...>, "Spdx-tech@..." <Spdx-tech@...>, "spdx@..." <spdx@...>
Subject: RE: [spdx-tech] Registration open for SPDX DocFest on Jan 27th

 

Rose,

 

Where can I find the target set objects to create/submit an SPDX SBOM?

 

 

From: Spdx-tech@... <Spdx-tech@...> On Behalf Of Rose Judge
Sent: Wednesday, January 12, 2022 11:39 AM
To: Spdx-tech@...; spdx@...
Subject: [spdx-tech] Registration open for SPDX DocFest on Jan 27th

 

Hello SPDX community,

 

SPDX is hosting another DocFest on January 27th from 7-11 AM PST. The purpose of this event is to bring together producers and consumers of SPDX documents and discuss differences between tool output and understanding for the same software artifacts. 


Specifically, the goals of this 
DocFest are to:
1) come to agreement on how the fields should be populated for a given artifact
2) identify instances where different use cases might lead to different choices for fields and structures of documents
3) assess how well the NTIA SBOM minimum elements are covered
4) create a set of reference SPDX SBOMs as part of the corpus for further tooling evaluation.

This event will require "sweat equity" – participants who can produce SPDX documents are expected to have generated at least one SPDX document from the target set (either source, built from source, built image or container equivalent). Participants who consume SPDX documents are expected to run at least two SPDX documents through their tooling and share any analysis results. Those who have signed up and have submitted files by January 21, 2022 will receive a meeting invite to the 
DocFest.

To indicate interest to participate, please fill in the following form:

https://forms.gle/Mq7ReinTY6gDL4cs9


Further details on how to participate will be mailed to those that have filled in the form. 

Thanks,
DocFest Organizers  (Rose, Gary, Kate)

 


Dick Brooks
 

Thanks, Rose – much appreciate the quick response and for all that you do for the SPDX community.

 

Looking forward to participating in the DocFest.

 

Cheers and best regards,

 

Dick Brooks

Never trust software, always verify and report!

http://www.reliableenergyanalytics.com

Email: dick@...

Tel: +1 978-696-1788

 

From: Rose Judge <rjudge@...>
Sent: Wednesday, January 12, 2022 11:51 AM
To: dick@...; spdx@...
Subject: Re: [spdx-tech] Registration open for SPDX DocFest on Jan 27th

 

Hi Dick,

 

Instructions to participate with target sets/objects will be mailed out on Monday. We are finalizing the targets as we speak.  

 

Thanks for your interest and patience. Excited to have you as part of this event!

 

-Rose

From: Dick Brooks <dick@...>
Organization: Reliable Energy Analytics LLC
Reply-To: "dick@..." <dick@...>
Date: Wednesday, January 12, 2022 at 8:48 AM
To: Rose Judge <rjudge@...>, "Spdx-tech@..." <Spdx-tech@...>, "spdx@..." <spdx@...>
Subject: RE: [spdx-tech] Registration open for SPDX DocFest on Jan 27th

 

Rose,

 

Where can I find the target set objects to create/submit an SPDX SBOM?

 

 

From: Spdx-tech@... <Spdx-tech@...> On Behalf Of Rose Judge
Sent: Wednesday, January 12, 2022 11:39 AM
To: Spdx-tech@...; spdx@...
Subject: [spdx-tech] Registration open for SPDX DocFest on Jan 27th

 

Hello SPDX community,

 

SPDX is hosting another DocFest on January 27th from 7-11 AM PST. The purpose of this event is to bring together producers and consumers of SPDX documents and discuss differences between tool output and understanding for the same software artifacts. 


Specifically, the goals of this 
DocFest are to:
1) come to agreement on how the fields should be populated for a given artifact
2) identify instances where different use cases might lead to different choices for fields and structures of documents
3) assess how well the NTIA SBOM minimum elements are covered
4) create a set of reference SPDX SBOMs as part of the corpus for further tooling evaluation.

This event will require "sweat equity" – participants who can produce SPDX documents are expected to have generated at least one SPDX document from the target set (either source, built from source, built image or container equivalent). Participants who consume SPDX documents are expected to run at least two SPDX documents through their tooling and share any analysis results. Those who have signed up and have submitted files by January 21, 2022 will receive a meeting invite to the 
DocFest.

To indicate interest to participate, please fill in the following form:

https://forms.gle/Mq7ReinTY6gDL4cs9


Further details on how to participate will be mailed to those that have filled in the form. 

Thanks,
DocFest Organizers  (Rose, Gary, Kate)