https://wiki.spdx.org/index.php?title=General_Meeting/Minutes/2020-11-05&feed=atom&action=historyGeneral Meeting/Minutes/2020-11-05 - Revision history2024-03-29T14:38:00ZRevision history for this page on the wikiMediaWiki 1.23.13https://wiki.spdx.org/index.php?title=General_Meeting/Minutes/2020-11-05&diff=4884&oldid=prevPodence: Created page with "* Attendance: 16 * Lead by Steve Winslow == Presentation: William Bartholomew == * Discussed efforts working with 3T-SBOM group to align approaches and modeling * Walked thr..."2020-12-02T12:15:34Z<p>Created page with "* Attendance: 16 * Lead by Steve Winslow == Presentation: William Bartholomew == * Discussed efforts working with 3T-SBOM group to align approaches and modeling * Walked thr..."</p>
<p><b>New page</b></p><div>* Attendance: 16<br />
* Lead by Steve Winslow<br />
<br />
== Presentation: William Bartholomew ==<br />
<br />
* Discussed efforts working with 3T-SBOM group to align approaches and modeling<br />
* Walked through key points of changes to base profile<br />
** Relationships being promoted to “object” level<br />
** Artifact; external references<br />
** Extensibility, potential for other authenticity measures than just hashes (e.g. public keys)<br />
* Briefly discussed other profiles<br />
<br />
== Legal Team Report – Steve / Jilayne ==<br />
<br />
* 3.11 release update<br />
** originally scheduled for Oct. 31<br />
** most of 3.11 cycle was focused on SPDX 3.0 licensing profile discussions<br />
** shifted release to approx. Nov. 25<br />
* call for participants to review license submissions / provide comments on “yes/no, should this be added” out-of-band from biweekly calls<br />
<br />
== Tech Team Report – Kate ==<br />
<br />
* Work proceeding on SPDX 3.0<br />
* Linking profile: focus on aligning with container-based ecosystems, work by Nisha and Santiago<br />
* Other profiles proceeding as well<br />
* Tooling: Online Tools recently updated<br />
<br />
== Other matters ==<br />
<br />
* Comments from Aveek re: ways to provide better on-ramps into the SPDX community for newcomers<br />
** Availability of Gitter as a real-time chat option; possibly explore other options<br />
** May discuss on next month’s General meeting<br />
<br />
== Additional Notes from KATE ==<br />
Here are the notes I took, since Steve was kind enough to host.<br />
<br />
Attendees: Steve Winslow, Kate Stewart, Mark baushke, Rishabh Bhatnagar, Aveek, Jilayne Lovejoy, Emmanuel Tournier, William Bartholomew, Alexios Zavras, Mike Dolan, Paul Madick, Mark Atwood, Michael Herzog, David Wheeler<br />
<br />
William went through and did a review of SPDX 3.0 Base Profile highlighting the differences.<br />
<br />
Artifacts - are promoting a specific External Reference (likely PURL) to be used<br />
Document - Now has a set of profiles that <br />
<br />
Complies with a profile - expect that mandatory are supported.<br />
If not have profile - can use the field, but not expected to meet the full requirements. <br />
<br />
Next step is converting this into the written text. <br />
Move into the other areas as well. <br />
<br />
Now’s the time to chime in in SPDX 3.0 specification if you have <br />
<br />
Mark Baushke - problem on how to express the overall license. Userland and Kernel based licensing in one package. Use Case interested in - Fast packet forwarding - kernel module with GPL2, and userland. …. show how to represent. <br />
<br />
Legal Team - 3.11 release - pushing it out until Nov 25th, today one more meeting. <br />
11 new license requests have been submitted in September. <br />
Help requested. : Commenting on licenses in github comments. XML files. <br />
<br />
Web site <br />
Refresh is ongoing. Feedback and suggestions are welcome. <br />
Mission discussed last month has now been incorporated<br />
<br />
Technical Team - <br />
SPDX 3.0 in progress<br />
Online tools - yaml conversions coming. <br />
<br />
Aveek - Observing SPDX - Community building and bringing new people into group. <br />
Group chat/slack? — use gitter, start discussing there as well. <br />
Need to improve our launching platform.<br />
Slack group? - with mentoring and advocates how to start off. <br />
<br />
Aveek has volunteered to provide his findings to help us grow the community next month as a guest speaker.<br />
<br />
Possibly Steve, Jilayne & Paul can provide overview of SPDX 3.0 License Profile in January?</div>Podence