May SPDX General Meeting Minutes
https://wiki.spdx.org/view/General_Meeting/Minutes/2018-05-03
General Meeting/Minutes/2018-05-03
< General Meeting | Minutes
· Attendance: 12
· Lead by Phil Odence
· Minutes of April meeting approved
Contents
[hide]
· 1 Guest Presentation, Automating Governance with SPDX- Yev Bronshteyn
· 2 Tech Team Report - Kate/Gary
· 3 Outreach Team Report - Jack
Guest Presentation, Automating Governance with SPDX- Yev Bronshteyn[edit]
· Variant on Leadership Summit Presentation
· Don’t need to define SPDX
· Will show product for illustrative purposes
· Governance Today
· Different formats for BoMs
· Challenges
· Manually updating
· Compliance Management
· Requires consistent tooling
· Goals using SPDX
· Automate BoM
· Automate Reporting
· Single format
· Illustration
· Replace disparate BoMs with SPDX versions
· Load into a single data store (example Apache Jena Fuseki
· Query with Sparql
· Demo
· Aggregating multiple BoMs
· Committing change to GItLab
· CI/CD- Build and Scan
· Generate new SPDX doc for changed project
· Sparql queries
· Policy checks
· Voila
Tech Team Report - Kate/Gary[edit]
· Working on outstanding requests for 2.2
· License expression features
· Handling cases of annotations and extensions to address
· 2.1.1 pdf
· Wrestling with tools a bit
· GoSoC
· Students and mentors in place
· Should be hearing from students during community bonding period
· Projects lined up
· Will present during General Meetings
Outreach Team Report - Jack[edit]
· LinuxCon Vancouver
· Trying to organize “back off” day before event starts
· Website:
· Still waiting on LF for moving Website to Wordpress
· Content
· Looking at a variety of ways
· Looking at audio/video recordings
· Could include monthly talks
· Yev volunteered to do his
· Looking for more people involvement in OTeam
Legal Team Report - Paul[edit]
· Released latest rev of license list
· Kudos Jilayne and others
· Working out how to manage license submissions in new world
· GoSoC student working out automation
Attendees[edit]
· Phil Odence, Black Duck/Synopsys
· Matthew Crawford, ARM
· Yev Bronshteyn, Black Duck/Synopsys
· Steve Billings, Black Duck/Synopsys
· Gary O’Neall, SourceAuditor
· Dave Marr, Qualcomm
· Jack Manbeck, TI
· Kate Stewart, Linux Foundation
· Steve Winslow, LF
· Paul Madick, Dimension Data
· Matije Suklje, LF
· John Scott, Ion Channel
Matije Suklje, LFFlattered, but my affiliation is with Liferay :)
Was a very interesting call. I’m miffed that we have some important internal
conference call clash directly and 100% every time with the SPDX Legal call.
cheers,
Matija Šuklje
--
gsm: +386 41 849 552
www: http://matija.suklje.name
xmpp: matija.suklje@...
sip: matija_suklje@...