Date   

Global work team meeting today @ 06:00 UTC / 14:00 CST / 15:00 KST/JST

 

Reminder: Global work team meeting today @ 06:00 UTC / 14:00 CST / 15:00 KST/JST

This will be our final review of the first version of the OpenChain online education course. Your eyes and assistance most welcome!

https://us02web.zoom.us/j/9990120120?pwd=NzVCaFE2L1RRRFZaSkk0dm8xdlplUT09


We start in around 3 hours 🙂

Shane Coughlan
OpenChain General Manager
+818040358083
Book a meeting:
https://meetings.hubspot.com/scoughlan


Latest OpenChain Newsletter now available

Jennifer McGinnis <jmcginnis@...>
 


External Webinar: Accelerating Innovation With Open Source and Agile Compliance in the Financial Sector

 

FYI.

“Open source adoption is increasing rapidly within the financial services industry. Thanks to cutting edge technologies, affordability, flexibility, and the power of the open source community – more and more financial institutions are encouraged to integrate open source components into their investment and more data processing systems. Meanwhile, the industry’s growing list of compliance initiatives and regulations dramatically changes the way financial companies rely on technology to help improve governance and compliance structures. In this webinar our experts will discuss the challenges the financial services industry faces when it comes to open source compliance, a look at regulation trusted standards and how companies that want to stay ahead of the game must leverage technology to automate important security and compliance processes.”



Open Compliance Summit @ 2021-12-16 - Virtual

 

The Linux Foundation Open Compliance Summit has just been announced for December 16th 2021 as a virtual event.
https://events.linuxfoundation.org/open-compliance-summit/

I will let you know when the call for papers opens.


State of Open, UK Survey

Jennifer McGinnis <jmcginnis@...>
 

Hi OpenChain,

We are sharing this survey on half of Open UK.  They are seeking information/feedback on the state of open within the UK:

The survey closes 10 June and will be reported 7 July.  We are looking to get those based in the UK to complete whether business or public sector, whatever business sector they are in and wherever their parent companies are.
Everyone based in the UK is welcome and if you know what IT your company uses it will take about 10 minutes to complete. It’s purposely simple.


State of Open: The UK in 2021, OpenUK Report - OpenUK

State of Open: The UK in 2021, Open UK Report  » Read more about: State of Open: The UK in 2021, OpenUK Report  »




Thank you!

Jenni


--
Jenni McGinnis
Projects Coordinator | The Linux Foundation
Assisting with RISC-V International, OpenChain, TARS, & OpenFabrics Alliance


Re: OpenChain Bi-Weekly Webinar - Today (June 1st) at 06:00 UTC / 14:00 CST / 15:00 KST+JST

 

Great webinar with Armijn Hemel just finished. It’s clear that we need to keep license variations top of mind. It’s not an overt challenge but there is less continuity than may be expected. Forthcoming academic article. Will highlight here when it is out.

Recording of the webinar will be out around Wednesday.

Shane Coughlan
OpenChain General Manager
+818040358083
Book a meeting:
https://meetings.hubspot.com/scoughlan

On Jun 1, 2021, at 10:14, Shane Coughlan <scoughlan@linuxfoundation.org> wrote:

OpenChain Bi-Weekly Webinar - Today (June 1st) at 06:00 UTC / 14:00 CST / 15:00 KST+JST

Our bi-weekly webinar will feature an exclusive deep-dive into an important topic: variations of the GPLv2 license, including from primary sources such as FSF. Armijn Hemel, who has done research in this area, will lead the webinar.

* https://us02web.zoom.us/j/9990120120?pwd=NzVCaFE2L1RRRFZaSkk0dm8xdlplUT09

Meeting ID: 999 012 0120
Password: 123456

One Tap Telephone (no screensharing)

* +358 9 4245 1488,,9990120120# Finland
* +33 7 5678 4048,,9990120120# France
* +49 69 7104 9922,,9990120120# Germany
* +852 5808 6088,,9990120120# Hong Kong
* +39 069 480 6488,,9990120120# Italy
* +353 6 163 9031,,9990120120# Ireland
* +81 524 564 439,,9990120120# Japan
* +82 2 6105 4111,,9990120120# Korea
* +34 917 873 431,,9990120120# Spain
* +46 850 539 728,,9990120120# Sweden
* +41 43 210 71 08,,9990120120# Switzerland
* +44 330 088 5830,,9990120120# UK
* +16699006833,,9990120120# US (San Jose)
* +12532158782,,9990120120# US

Find your local number: https://zoom.us/u/abeUqy3kYQ


OpenChain Bi-Weekly Webinar - Today (June 1st) at 06:00 UTC / 14:00 CST / 15:00 KST+JST

 

OpenChain Bi-Weekly Webinar - Today (June 1st) at 06:00 UTC / 14:00 CST / 15:00 KST+JST

Our bi-weekly webinar will feature an exclusive deep-dive into an important topic: variations of the GPLv2 license, including from primary sources such as FSF. Armijn Hemel, who has done research in this area, will lead the webinar.

* https://us02web.zoom.us/j/9990120120?pwd=NzVCaFE2L1RRRFZaSkk0dm8xdlplUT09

Meeting ID: 999 012 0120
Password: 123456

One Tap Telephone (no screensharing)

* +358 9 4245 1488,,9990120120# Finland
* +33 7 5678 4048,,9990120120# France
* +49 69 7104 9922,,9990120120# Germany
* +852 5808 6088,,9990120120# Hong Kong
* +39 069 480 6488,,9990120120# Italy
* +353 6 163 9031,,9990120120# Ireland
* +81 524 564 439,,9990120120# Japan
* +82 2 6105 4111,,9990120120# Korea
* +34 917 873 431,,9990120120# Spain
* +46 850 539 728,,9990120120# Sweden
* +41 43 210 71 08,,9990120120# Switzerland
* +44 330 088 5830,,9990120120# UK
* +16699006833,,9990120120# US (San Jose)
* +12532158782,,9990120120# US

Find your local number: https://zoom.us/u/abeUqy3kYQ


OpenChain Bi-Weekly Webinar - Today (June 1st) at 06:00 UTC / 14:00 CST / 15:00 KST+JST

Shane Coughlan <scoughlan@...>
 

OpenChain Bi-Weekly Webinar - Today (June 1st) at 06:00 UTC / 14:00 CST / 15:00 KST+JST

Our bi-weekly webinar will feature an exclusive deep-dive into an important topic: variations of the GPLv2 license, including from primary sources such as FSF. Armijn Hemel, who has done research in this area, will lead the webinar.

* https://us02web.zoom.us/j/9990120120?pwd=NzVCaFE2L1RRRFZaSkk0dm8xdlplUT09

Meeting ID: 999 012 0120
Password: 123456

One Tap Telephone (no screensharing)

* +358 9 4245 1488,,9990120120# Finland
* +33 7 5678 4048,,9990120120# France
* +49 69 7104 9922,,9990120120# Germany
* +852 5808 6088,,9990120120# Hong Kong
* +39 069 480 6488,,9990120120# Italy
* +353 6 163 9031,,9990120120# Ireland
* +81 524 564 439,,9990120120# Japan
* +82 2 6105 4111,,9990120120# Korea
* +34 917 873 431,,9990120120# Spain
* +46 850 539 728,,9990120120# Sweden
* +41 43 210 71 08,,9990120120# Switzerland
* +44 330 088 5830,,9990120120# UK
* +16699006833,,9990120120# US (San Jose)
* +12532158782,,9990120120# US

Find your local number: https://zoom.us/u/abeUqy3kYQ


OpenChain Web Application updated with Captcha functionality

 

FYI, our conformance web app is fully restored after the recent DDoS thanks to the amazing work of Gary O’Neall with support from Jan Thielscher 👏👏👏👏👏

From: Gary O'Neall <gary@...>
Date: May 29, 2021 5:54:32 JST
Subject: OpenChain Web Application updated with Captcha functionality



The OpenChain Web Application has been updated to use Captchas and all functionality has been restored.  This should prevent similar attacks where a computer script fills out and submits forms.

 

There are 3 to 4 outstanding items:

 

Let me know if you have any questions or hear of any issues.


Gary

 

-------------------------------------------------

Gary O'Neall

Principal Consultant

Source Auditor Inc.

Mobile: 408.805.0586

Email: gary@...

CONFIDENTIALITY NOTE: The information transmitted, including attachments, is intended only for the person(s) or entity to which it is addressed and may contain confidential and/or privileged material. Any review, re-transmission, dissemination or other use of, or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy any copies of this information.

 


Global Work Group Call 2021-05-24 Recording Now Available

Jennifer McGinnis <jmcginnis@...>
 

Hi OpenChain,

Please find the recording from this week's Global Work Group available here:

https://www.openchainproject.org/news/2021/05/27/openchain-global-work-group-call-2021-05-24-full-recording


Thanks!

Jenni

--
Jenni McGinnis
Projects Coordinator | The Linux Foundation
Assisting with RISC-V International, OpenChain, TARS, & OpenFabrics Alliance


Re: Invitation: OpenChain Quarterly Summit @ Mon Jun 14, 2021 10am - 1pm (EDT) (main@lists.openchainproject.org)

 

Greetings everyone! Let’s talk a little more about this summit!

I would like to propose that we make the forthcoming Quarterly Mini-Summit a little special, especially from the perspective of welcoming new participants to our community.

As usual we will have a three hour block. Here is my suggestion:

Hour #1: Short case studies (5 minutes max) from the community + open discussion of 10 minutes to help people catch up and welcome new community members.

Hour #2: Focus on drafting the security usage description document for OpenChain ISO 5230

Hour #3: Education work team: focus on building out new sections of the online education.

What do you think?

Regards

Shane

Jennifer McGinnis <jmcginnis@linuxfoundation.org> wrote:
You have been invited to the following event.
OpenChain Quarterly Summit
When
Mon Jun 14, 2021 10am – 1pm Eastern Time - New York


Discussion Point: Consolidation and Framing of Work Groups

 

Greetings all!

I would like to open a discussion about tidying up our work groups and introducing new ways for participants to engage.

First of all, I want to propose that our curriculum and education work groups merge, allowing one team oversight of our reference material. I propose it is initially co-chaired by Balakrisha and Alexios as activity for 2nd Half 2021 is discussed :)

I also propose that our conformance and specification work teams are combined, given that we have narrowed the work to “specification and guidance documents + self-certification questions.” I propose it is initially co-chaired by Mark and Miriam as activity for 2nd Half 2021 is discussed :)

I would also like us to open a discussion about how we select Chairs for our various work groups (global and local), so that we can make sure it is democratic. Perhaps we can consider one or two year elections, and test it with one work group, to see how things go? There is no need to change chairs, but we want to make sure people feel included in all aspects of project decision-making and governance.

Regards

Shane


Supplier Education Pack - Final Drafts of Chinese (trad+simpl), English, French, German, Japanese, Korean and Vietnamese ready

 


Invitation: OpenChain Quarterly Summit @ Mon Jun 14, 2021 10am - 1pm (EDT) (main@lists.openchainproject.org)

Jennifer McGinnis <jmcginnis@...>
 

You have been invited to the following event.

OpenChain Quarterly Summit

When
Mon Jun 14, 2021 10am – 1pm Eastern Time - New York
Where
https://us02web.zoom.us/j/9990120120?pwd=NzVCaFE2L1RRRFZaSkk0dm8xdlplUT09 (map)
Calendar
main@...
Who
jmcginnis@... - creator
main@...
Join Zoom Meeting
https://us02web.zoom.us/j/9990120120?pwd=NzVCaFE2L1RRRFZaSkk0dm8xdlplUT09

Meeting ID: 999 012 0120
Passcode: 123456
One tap mobile
⁨+16699006833,,9990120120#,,,,*123456#⁩ US (San Jose)
⁨+12532158782,,9990120120#,,,,*123456#⁩ US (Tacoma)

Dial by your location
        ⁨+1 669 900 6833⁩ US (San Jose)
        ⁨+1 253 215 8782⁩ US (Tacoma)
        ⁨+1 301 715 8592⁩ US (Washington DC)
        ⁨+1 312 626 6799⁩ US (Chicago)
        ⁨+1 346 248 7799⁩ US (Houston)
        ⁨+1 408 638 0968⁩ US (San Jose)
        ⁨+1 646 876 9923⁩ US (New York)
Meeting ID: 999 012 0120
Passcode: 123456
Find your local number:
https://us02web.zoom.us/u/kW7exlfu



Tentative Agenda:
Hour 1: Newbies Session
Hour 2: specification security guidance document
Hour 3: Work Session on Education Course

Going (main@...)?   Yes - Maybe - No    more options »

Invitation from Google Calendar

You are receiving this courtesy email at the account main@... because you are an attendee of this event.

To stop receiving future updates for this event, decline this event. Alternatively you can sign up for a Google account at https://calendar.google.com/calendar/ and control your notification settings for your entire calendar.

Forwarding this invitation could allow any recipient to send a response to the organizer and be added to the guest list, or invite others regardless of their own invitation status, or to modify your RSVP. Learn More.


OpenChain Supplier Education Leaflet - Korean Version - Ready For Review

 

Dear Korean Work Group!

The Korean version of the supplier education leaflet is now available for review. Can you give us your opinion?
https://github.com/OpenChain-Project/Reference-Material/tree/master/Suppliers/Leaflet/Official/2.1/ko

Regards

Shane


Webinar #23 available to view now online

Jennifer McGinnis <jmcginnis@...>
 

Hi OpenChain community!

Webinar #23 - OpenChain ISO 5230 in Venture Capital - is now available online for you to view:

https://www.openchainproject.org/news/2021/05/21/webinar-23-openchain-iso-5230-in-venture-capital


Thanks, and have a great weekend!


Jenni

--
Jenni McGinnis
Projects Coordinator | The Linux Foundation
Assisting with RISC-V International, OpenChain, TARS, & OpenFabrics Alliance


Supplier Education Pack dedicated landing page

 

Everyone, there is a dedicated landing page for the supplier education pack here:
https://www.openchainproject.org/supplier-education-pack

We will be building this out to make adoption super easy for suppliers. If you have ideas and suggestions, this is the thread to raise them!


OpenChain Supplier Pack Translations

 

Greetings all!

Exciting news: our translations of the key slides from the supplier education pack are ready for review. We have:
Chinese Simplified and Traditional!
German!
Japanese!
aaaaand...
Korean!

Oh wait. There is more.

French!
Vietnamese!

If you could help review it would be super appreciated:
https://github.com/OpenChain-Project/Reference-Material/tree/master/OpenChain-ISO-5230-Supplier-Education-Pack

We want to catch any mistakes before calling it final.

Regards

Shane


Re: Standard documents to share sbom report among supply chain

 

Hi Dinesh!

= Everyone else ==
I advise everyone to check out the full discussion here:
https://github.com/OpenChain-Project/Reference-Material/issues/6
== Back to Dinesh ==

We actually have a solution in the market that sounds like it suits your use-case of - basically - an Excel software bill of materials. It is called “SPDX Lite” and it is an optional component of SPDX 2.2. It was created by Japanese companies like Hitachi, Toshiba and Fujitsu for precisely the use case you mention.

You can read about it here:
https://spdx.github.io/spdx-spec/appendix-VIII-SPDX-Lite/

It is very short, compact and effective for human readability.

Regards

Shane

On May 20, 2021, at 15:24, DR <dineshr93@gmail.com> wrote:

Hi Shane & all,

I have a question.
Is there are standard documents required to share sbom contained OSS IP details for 2 Main cases.
Case 1: Docx or pdf OSS report to be shared along with our direct product or services
Case 2: Excel or other format to share oss details among Tier n's (Tier 1, Tier 2 ... etc & OEM) so that OEM can collate & use documents from Case 1. (or spdx)

I searched here not sure where to get them.. (Tracing a doc is little tough)


raised an ticket here https://github.com/OpenChain-Project/Reference-Material/issues/6

Please help if it's already there...

Thanks
Dinesh




Standard documents to share sbom report among supply chain

DR
 

Hi Shane & all,

I have a question.

Is there are standard documents required to share sbom contained OSS IP details for 2 Main cases.
Case 1: Docx or pdf OSS report to be shared along with our direct product or services
Case 2: Excel or other format to share oss details among Tier n's (Tier 1, Tier 2 ... etc & OEM) so that OEM can collate & use documents from Case 1. (or spdx)

I searched here not sure where to get them.. (Tracing a doc is little tough)



Please help if it's already there...

Thanks
Dinesh



321 - 340 of 4323