Technical Team/Minutes/2015-09-23¶
Archived page
Read-only copy of the SPDX wiki. The wiki is no longer active; its content has moved to https://github.com/spdx. Last edited 2015-09-23 by Goneall.
Sept 1, 2015
Attendees¶
- Gary O'Neall
- Kate Stewart
- Bill Schineller
- Scott Sterling
- Mark Gisi
External IDs¶
- Bill in discussion with Financial Services group standardizing a Bill of Materials format which include references to Security products with vulnerabilities (CPE's)
- The schema was reviewed and compared with SPDX
- Kate requested that we ask the Financial Services group to review and re-use any appropriate SPDX terms
Supply Chain¶
- Supply Chain Mini-Summit is coming up
- Focus on merging in security information into the Bill of Materials
- Supply Chain Summit info: http://events.linuxfoundation.org/events/linuxcon-europe/extend-the-experience/supply-chain-summit
- Blog article from Kate http://www.linux.com/news/featured-blogs/209-kate-stewart/853819-future-software-supply-chain-thoughts