Hi all,

As the message was suspended until today, the sign-up will close on Oct 20^th, instead of Oct 18^th.

Best,

Ivana

VMware Open Source Program Office

Hello SPDX tooling community,

SPDX is hosting another DocFest on November 11, 2022 - 8am-12am PST. The purpose of this event is to bring together producers and consumers of SPDX documents and discuss differences between tool output and understanding for the same software artifacts. 

The SPDX project will be hosting another "DocFest" to bring together the producers and consumers of SPDX documents and walk through the differences between tools for the same images.

The goals of this DocFest is to:

1) come to agreement on how the fields should be populated for a given artifact, with a focus on the new 2.3 fields, but those that generate 2.2 are welcome.

2) identify instances where different use cases might lead to different choices for fields and structures of documents

3) assess how well the NTIA SBOM minimum elements are covered

4) create a set of reference SPDX SBOMs as part of the corpus for further tooling evaluation.

The organizers will share a small set of simple targets to those that sign up to participate by Oct 18th.

This event will require "sweat equity" - participants whose tools produce documents are expected to have generated at least one SPDX document  from the target set (either source,  built from source,  built image or container equivalent). Those who have signed up and have submitted at least the first draft by Oct 25 will receive a meeting invite to the DocFest. Final due by Oct 31. 

Participants whose tools consume will have until November 4th to share evidence and be invited to participate in the DocFest.

To indicate interest to participate, please fill in the following form:

https://forms.gle/xnb4nuFXomNPEp3v5

Further details on how to participate will be mailed to those that have filled in the form.

Thanks,

DocFest Organizers  (Adolfo, Gary, Ivana, Kate, Nisha)