|
Re: List of open chain calendar events for partners
Indeed!
toggle quoted messageShow quoted text
We were doing a short experiment with call to action (time limited) and holding off on mini-summits pending the large summit last week. A revised schedule will be announced in less than 24 hours 🙂 Shane Coughlan OpenChain General Manager +818040358083 Book a meeting: https://meetings.hubspot.com/scoughlan
On Sep 21, 2022, at 19:33, Christopher Wood <cvw01@...> wrote:
|
||||||||||||
|
|
||||||||||||
|
OpenChain Security Assurance Specification 1.0 now available
Dear all
The OpenChain Security Assurance Specification 1.0 is now available: https://github.com/OpenChain-Project/Security-Assurance-Specification/blob/main/Security-Assurance-Specification/1.0/en/openchain-security-specification-1.0.md This specification is built from the Security Assurance Reference Guide 2.0 (Release Candidate 1) published on 2022-03-28. That completed reference specification document went through a final approval process via editing on our specification list and calls, before graduating to a governing board vote to transform into this published security specification on 2022-09-14. We will now proceed to ISO/IEC JTC-1 PAS submission with an estimated completion date of circa mid-2023. In the meantime, our security assurance specification is ready for market adoption as a de facto standard. Over the next couple of weeks we have some time for sanity-checks and minor adjustments. I would like to begin that process today. There are two tasks for the community: (1) Check our Security Assurance Specification 1.0 against the Security Assurance Reference Guide 2.0 (Release Candidate 1) to ensure Sections 1, 2 and 3 match. You can find the Security Assurance Reference Guide 2.0 (Release Candidate 1) here: https://github.com/OpenChain-Project/Security-Assurance-Specification/tree/main/Security-Assurance-Guide-Depreciated/2.0 (2) Check the OpenChain Security Assurance Specification 1.0 for any typographical errors that have snuck through our existing editing process. You can find the document linked at the start of this email or here: https://github.com/OpenChain-Project/Security-Assurance-Specification/blob/main/Security-Assurance-Specification/1.0/en/openchain-security-specification-1.0.md This email constitutes a soft launch for this specification. Over the next few days we will start broader distribution of this news, including on social media and via blog posts. However, you can begin sharing it immediately with your teams and peers. Please note: the scope of this reference specification may expand over time based on community feedback. However, comments and notes should be confined to the existing scope at this juncture. Our specification is complete barring minor adjustments for readability, editing and clarity. Regards Shane — Shane Coughlan General Manager, OpenChain e: scoughlan@... p: +81 (0) 80 4035 8083 w: www.linuxfoundation.org Schedule a call: https://meetings.hubspot.com/scoughlan
|
||||||||||||
|
|
||||||||||||
|
Re: List of open chain calendar events for partners
Christopher Wood
Hi Steve and Shane It’s not just you Steve. I thought the same thing when I looked at the schedule this morning. Best Chris
On Sep 21, 2022, at 9:55 AM, Steve Kilbane <stephen.kilbane@...> wrote:
|
||||||||||||
|
|
||||||||||||
|
Re: List of open chain calendar events for partners
Yes, the calendar is about to get a ton of new entries, but currently is looking quiet 🙂
toggle quoted messageShow quoted text
Shane Coughlan OpenChain General Manager +818040358083 Book a meeting: https://meetings.hubspot.com/scoughlan
On Sep 21, 2022, at 16:55, Steve Kilbane <stephen.kilbane@...> wrote:
|
||||||||||||
|
|
||||||||||||
|
Re: List of open chain calendar events for partners
Hi Shane,
Actually, that community calendar is looking quite sparse. I’m seeing the regular Telco sessions and a single German workgroup session, but nothing else for the next year. Are all the entries going to be re-added now that the European holiday season is done?
(or is it just me? I swear that calendar doesn’t like me…)
steve
From:
main@... <main@...> on behalf of Shane Coughlan <scoughlan@...> [External]
|
||||||||||||
|
|
||||||||||||
|
Re: List of open chain calendar events for partners
Yes, of course :)
toggle quoted messageShow quoted text
Our community calendar is located here and is always updated with the latest event information: https://www.openchainproject.org/get-started/participate
On Sep 21, 2022, at 16:34, Lubos Kocman via lists.openchainproject.org <lubos.kocman=suse.com@...> wrote:
|
||||||||||||
|
|
||||||||||||
|
List of open chain calendar events for partners
Lubos Kocman
Hello openchain community!
my calendar seems to have quite a lot of outdated openchain events (for partners etc). Is there a list of regular (partner) events or even better a fresh .ics that I could subscribe to? Thank you very much in advance -- Luboš Kocman (he/him) openSUSE Leap Release Manager SUSE +1 2345678910 www.suse.com
|
||||||||||||
|
|
||||||||||||
|
Tooling Capability Map from the OpenChain Reference Tooling Work Group
The OpenChain Tooling Work Group has been working on a Tooling Capability Map that can help the global market better use open source tooling for open source license, security and export control compliance. You will find the most immediate impact in license compliance, but you can expect other use-cases to be increasingly addressed both inside the OpenChain Project and beyond in the coming months.
Check it out here and attached: https://docs.google.com/presentation/d/1l224lXBb6AA7hve_mKph4ir3qbRV350LnL_X4IUbAWQ/edit?usp=sharing Want to help build this? Join the OpenChain Reference Tooling Work Group mailing list here: https://groups.io/g/oss-based-compliance-tooling
|
||||||||||||
|
|
||||||||||||
|
OpenChain Summit + Governing Board News Summary
You will get individual emails providing details on each item. The summary is:
(1) We are proceeding with our security specification, so our license compliance specification will be joined with a de facto sister (this month) and a fellow ISO/IEC standard circa mid-2023. (2) We will be improving our work group structure to make it easier to engage with the topics that interest you (and avoid the ones that don’t). (3) We are going to do export control with a mini-summit later this year. This is a topic our community has been informally discussing for a few years. (4) We will work with LF leadership to improve the narrative regarding how the various LF process projects interlink. Our goal will be to ensure there is a single way to land on the domain and to find the information you need quickly. (5) With the above in mind, we will be more heavily communicating the core mission of OpenChain: to build trust in the supply chain. The first domain we pushed hard to transform was licensing compliance, but it was never intended to be the only. There is more, especially in terms of things like amazing work coming out of our reference tooling work group, and you can track that via individual emails coming soon.
|
||||||||||||
|
|
||||||||||||
|
Today's call to action: markdown in the reference library call deferred
Dear all
Balakrishna is on a business trip and will not be available to chair today’s meeting. For this reason we will defer the call, continue by email, and hold our next call on schedule in two weeks. If you have any questions just let me know in this thread. Otherwise, an email containing a summary of our work to date and next steps will be shared later today. Regards Shane — Shane Coughlan General Manager, OpenChain e: scoughlan@... p: +81 (0) 80 4035 8083 w: www.linuxfoundation.org Schedule a call: https://meetings.hubspot.com/scoughlan
|
||||||||||||
|
|
||||||||||||
|
Re: OpenChain @ Open Source2022 | OSCAR
For this event, OSCAR means Open Source Cloud Alliance for industRy(OSCAR).
toggle quoted messageShow quoted text
Shane Coughlan OpenChain General Manager +818040358083 Book a meeting: https://meetings.hubspot.com/scoughlan
On Sep 20, 2022, at 13:29, Shane Coughlan via lists.openchainproject.org <scoughlan=linuxfoundation.org@...> wrote:
|
||||||||||||
|
|
||||||||||||
|
Re: OpenChain @ Open Source2022 | OSCAR
I am chasing via WeChat right now 🙂
toggle quoted messageShow quoted text
Shane Coughlan OpenChain General Manager +818040358083 Book a meeting: https://meetings.hubspot.com/scoughlan
On Sep 20, 2022, at 13:14, Mattran, Mary <mary.mattran@...> wrote:
|
||||||||||||
|
|
||||||||||||
|
Re: OpenChain @ Open Source2022 | OSCAR
I'm still hoping for an answer to the question what "OSCAR means. Our compliance team is called OSCAR for Open Source Compliance Audit & Review.
|
||||||||||||
|
|
||||||||||||
|
OpenChain Korea Work Group Meeting #15 - September 21st at 14:00 KST
OpenChain Korea Work Group Meeting #15 - September 21st at 14:00 KST
This event is sponsored by NIPA and open to everyone.  Learn more at this link:
|
||||||||||||
|
|
||||||||||||
|
Re: REMINDER: OpenChain Summit 2022 – Dublin, Ireland – September 14th @ 11:00 Ireland Time (10:00 UTC, 12:00 CEST, 15:30 IST, 18:00 CST, 19:00 KST+JST)
Thank you
Please note our apology. We are attending GovTech
Sorry for the late apology.
Shalom,
Adv. Lufuno T Khorommbi (Ps)
From: Shane Coughlan
The OpenChain Project will hold an all-day summit adjacent to Open Source Summit Europe (OSS EU) today (14th of September).
-- Adv. Lufuno T Khorommbi (Ps)
|
||||||||||||
|
|
||||||||||||
|
REMINDER: OpenChain Summit 2022 – Dublin, Ireland – September 14th @ 11:00 Ireland Time (10:00 UTC, 12:00 CEST, 15:30 IST, 18:00 CST, 19:00 KST+JST)
The OpenChain Project will hold an all-day summit adjacent to Open Source Summit Europe (OSS EU) today (14th of September).
Join via Zoom: https://zoom.us/j/4377592799 Provisional Agenda: • 11:00 to 11:30: Opening Keynote, Andrew Katz of Orcro • 11:30 to 12:30: The OpenChain License Compliance and Security Compliance specification material • 12:30 to 14:30: Open source tooling for open source compliance (automation for everyone) • 14:30 to 15:30: SBOM Deep Dive – Telco and More • 15:30 to 16:30: OSPO and other activities (theory, practice and what is actually happening in market) • 16:30 to 17:00: Summary Session Physical Location: Orion Room 1 @ Spencer Hotel, Excise Walk, International Financial Services Centre, Dublin 1, D01 X4C9, Ireland 3 minutes from Dublin Convention Center (OSS EU venue). Map link: https://www.google.com/maps/dir/The+Convention+Centre+Dublin,+North+Wall+Quay,+North+Wall,+Dublin+1,+Ireland/Spencer+Hotel,+Excise+Walk,+International+Financial+Services+Centre,+Dublin+1,+D01+X4C9,+Ireland/@53.3478462,-6.2425523,18z/data=!3m1!4b1!4m14!4m13!1m5!1m1!1s0x48670ef2b83165af:0x25faa23c18a1e358!2m2!1d-6.2396033!2d53.347725!1m5!1m1!1s0x485c490257b389a7:0x640fa38258dfc84d!2m2!1d-6.2433009!2d53.3480387!3e2
|
||||||||||||
|
|
||||||||||||
|
OpenChain Summit 2022 - I did not register but can I still attend? - Tomorrow in Dublin, Ireland and on Zooom
Sure, you can join via our Zoom link here:
https://zoom.us/j/4377592799 We start at 11:00 Ireland Time (10:00 UTC) on the 14th of September 2022 (tomorrow). If you want to attend in person, please reach out to us via this email thread to confirm a space. Right now we can accommodate a few more people. Learn more about the event: Provisional Agenda • 11:00 to 11:30: Opening Keynote, Andrew Katz of Orcro • 11:30 to 12:30: The OpenChain License Compliance and Security Compliance specification material • 12:30 to 14:30: Open source tooling for open source compliance (automation for everyone) • 14:30 to 15:30: SBOM Deep Dive – Telco and More • 15:30 to 16:30: OSPO and other activities (theory, practice and what is actually happening in market) • 16:30 to 17:00: Summary Session https://www.openchainproject.org/featured/2022/09/01/openchain-summit-2022
|
||||||||||||
|
|
||||||||||||
|
Invitation: OpenChain Summit @ Wed Sep 14 19:00 - Thu Sep 15, 2022 01:00 (JST) (main@lists.openchainproject.org)
|
||||||||||||
|
|
||||||||||||
|
OpenChain online courses - we keep getting great feedback
The OpenChain online training courses created in collaboration with LF Training have done really well. These are LFC 193 and LFC 194 in their system, both free to take. They both hold a 4.6 all time satisfaction score out of a potential 5. This places them at the top of the pile in terms of course performance. We have also been prolific in awarding digital badges to users:
Well done all! Regards Shane Shane Coughlan OpenChain General Manager +818040358083 Book a meeting: https://meetings.hubspot.com/scoughlan
|
||||||||||||
|
|
||||||||||||
|
Re: Catch Up: OSPO Case Studies in Japan (Japanese)
teppei asaba
Hi Ana-san,
-- teppei asaba
差出人: main@... <main@...> が Hidekazu KAMINO <kamino@...> の代理で送信
送信日時: 2022年9月8日 10:19 宛先: main@... <main@...> 件名: Re: [openchain] Catch Up: OSPO Case Studies in Japan (Japanese) Hi Ana,
I'd be happy to join the OSPOCon Japan Program Committee on behalf of Mercari OSPO.
Best,
--------------------------------------------------------------
Hidekazu Kamino 上野 英和
Manager (Patent Attorney)
Intellectual Property
Mercari, Inc.
--------------------------------------------------------------
2022年9月8日(木) 8:39 Hiro Fukuchi <hiroyuki.fukuchi@...>:
|
||||||||||||
|
|