Date   

OpenChain Global Work Team Meeting - 2021 -11-22 (Today) @ 14:00 UTC / 06:00 PST / 15:00 CET / 19:30 IST / 22:00 CST / 23:00 KST + JST

 

Our regular global work team meeting takes place in one hour.

Our first playbook (for Medium Companies) is done. Now seeking final comments before preparing for publication.

The OpenChain Playbooks - Medium Company - Final Review:
https://docs.google.com/document/d/1GK0-d5vy_mN8gzAuS5XQ6vYM8_BePvO088WYV0eRF7M/edit#heading=h.7i5u45phff9

Dial in

https://zoom.us/j/4377592799

Not sure of your time?
OpenChain Global Work Team Meeting - 2021 -11-22 (Today) @ 14:00 UTC / 06:00 PST / 15:00 CET / 19:30 IST / 22:00 CST / 23:00 KST + JST


Catch Up: OpenChain Webinar #33 – The McHardy Story

 


Reminder: telco working group call 2021-11-18 at 17:00 UTC / 09:00 PST / 18:00 CET

 

This telecommunications work group call will sync notes from the recent Europe / Asia meeting. It is designed to help ensure North American stakeholders are fully up-to-speed and to provide an opportunity to share notes. It will be chaired by Jimmy Ahlberg from Ericsson.

All welcome. No registration. Dial in:
https://zoom.us/j/4377592799

Shane Coughlan
OpenChain General Manager
+818040358083
Book a meeting:
https://meetings.hubspot.com/scoughlan


Open Compliance Summit - Virtual - December 16th

 

A reminder that the Open Compliance Summit is in four weeks.

This is an exclusive event for Linux Foundation members and select invitees that provides an excellent opportunity for organizations to share knowledge around open source compliance. Attendance is limited to ensure ease of networking and collaboration.

We have a schedule covering all the key topics of 2021, from standards to automation, and some great practical case studies:

You can request an invitation here:

Places are limited. This is an event under Chatham House Rule and will not be rebroadcast.

We decided to keep costs minimal and just cover the virtual platform. It is $20 USD for a ticket. 20% off for LF Members, so $16 USD.

Regards

Shane 

Shane Coughlan
OpenChain General Manager
+818040358083
Book a meeting:
https://meetings.hubspot.com/scoughlan


Re: OpenChain Bi-Weekly Webinar 2021 -11-15 (Today) @ 14:00 UTC / 06:00 PST / 15:00 CET / 19:30 IST / 22:00 CST / 23:00 KST + JST

 

Reminder: our webinar starts in one hour. If you want to unpack the entire copyright trolling issue with a focus on the technical side, this is the one to watch.

On Nov 15, 2021, at 16:49, Shane Coughlan via lists.openchainproject.org <scoughlan=linuxfoundation.org@...> wrote:


Our webinar today will focus on “The McHardy Story” and be a technical analysis by Armijn Hemel of the ‘copyright trolling’ activities that caused disruption around the open source space for several years.

For context (and to avoid repeating the legal details on the call), here is some further reading:
https://opensource.com/article/17/8/patrick-mchardy-and-copyright-profiteering
https://lwn.net/Articles/752485/
https://lwn.net/Articles/721458/
http://laforge.gnumonks.org/blog/20180307-mchardy-gpl/
http://docs.dpaq.de/13314-urteil_lg_k_ln.pdf

Dial in



Need to check your timezone?

2021 -11-15 (Today) @ 14:00 UTC / 06:00 PST / 15:00 CET / 19:30 IST / 22:00 CST / 23:00 KST + JST


Regards

Shane 

Shane Coughlan
OpenChain General Manager
+818040358083
Book a meeting:
https://meetings.hubspot.com/scoughlan


OpenChain Bi-Weekly Webinar 2021 -11-15 (Today) @ 14:00 UTC / 06:00 PST / 15:00 CET / 19:30 IST / 22:00 CST / 23:00 KST + JST

 

Our webinar today will focus on “The McHardy Story” and be a technical analysis by Armijn Hemel of the ‘copyright trolling’ activities that caused disruption around the open source space for several years.

For context (and to avoid repeating the legal details on the call), here is some further reading:
https://opensource.com/article/17/8/patrick-mchardy-and-copyright-profiteering
https://lwn.net/Articles/752485/
https://lwn.net/Articles/721458/
http://laforge.gnumonks.org/blog/20180307-mchardy-gpl/
http://docs.dpaq.de/13314-urteil_lg_k_ln.pdf

Dial in



Need to check your timezone?

2021 -11-15 (Today) @ 14:00 UTC / 06:00 PST / 15:00 CET / 19:30 IST / 22:00 CST / 23:00 KST + JST


Regards

Shane 

Shane Coughlan
OpenChain General Manager
+818040358083
Book a meeting:
https://meetings.hubspot.com/scoughlan


IMPORTANT: Next Automation Case Study: Virtual Supply Chain Proof of Concept on November 24th at 09:00 UTC / 10:00 CET / 17:00 CST / 18:00 KST + JST

 

Heads up everyone.

We are going to focus our effort on the virtual supply chain demonstration in late November, so the prior section of the case study (multiple tool overview) is deferred. This is to ensure Max has plenty of time to prepare and because the virtual supply chain - by definition - will demonstrate various tools in play.

The event will take place on November 24th at 09:00 UTC / 10:00 CET / 17:00 CST / 18:00 KST + JST. The event is in our global calendar:

We will hold it as usual in our Zoom room:

This is a prelude to our Facebook case study and our summary of the initial four month case study in early and mid December.

If you have any questions you can ask them in this thread :)


The OpenChain PlayBooks - Getting Started

 

We have started work on the OpenChain PlayBooks, full decision-making examples for companies adopting OpenChain. After discussion on the work team call, we want to get the first part of these playbooks out for December 16th, the Open Compliance Summit.

We have provisionally chosen the “medium company” playbook. The document editing link is below and you are encouraged to take a look and help expand our framework material. For your reference, here is the complete introduction to the playbook document to explain context:

Introduction

The OpenChain PlayBooks are intended to help you understand the types of decisions made by managers in companies adopting OpenChain ISO/IEC 5230:2020. We cover examples of the decision-process in small, medium and large companies. Our examples are based on companies (a) in the technology industry, (b) in the middle of the supply chain and (c) shipping physical products containing software.

This may sound specific. However, the intention is to provide a thinking-tool for your company. Whether you are in the technology, finance, cloud, infrastructure or automotive industry (or any other), you will face similar challenges and solutions. The same applies whether you are in the middle of the supply chain or at its end, and whether you are shipping hardware or software. Our chosen examples cover a lot of ground.

There may be situations where you would like more examples for more specific industries. This is where the OpenChain community comes in. You can join our mailing lists, our webinars, our group calls and our regional work groups to discuss challenges with your peers and in your native language. You can get started here:
https://www.openchainproject.org/community


The OpenChain PlayBooks:
https://docs.google.com/document/d/1GK0-d5vy_mN8gzAuS5XQ6vYM8_BePvO088WYV0eRF7M/edit?usp=sharing


Re: Education Meeting Today @ 09:30 UK / 10:30 Brussels / 15:00 IST / 17:30 CST / 18:30 KST + JST

 

Reminder that we start in just under ten minutes. Balakrishna will chair.

Our document is here, our focus is on making sure Chapters 1~5 have an effective narrative structure, and only use bullet points where absolutely necessary.
https://docs.google.com/document/d/1FA6GvYG7G-cQgSdAM610CjYQExwJW3xY/edit?usp=sharing&ouid=105868944456094103683&rtpof=true&sd=true

Join Zoom Meeting
https://zoom.us/j/4377592799

On Nov 5, 2021, at 14:57, Shane Coughlan <scoughlan@...> wrote:

Heads up. We need your assistance. We are finalizing the online course and have a few items for review.

As discussed in previous meeting 1st training will be chapters 1-5, training final review date 30 November., public release date by 16th of December.
https://docs.google.com/document/d/1FA6GvYG7G-cQgSdAM610CjYQExwJW3xY/edit?usp=sharing&ouid=105868944456094103683&rtpof=true&sd=true

2nd training release will be chapter 6-8 final review date first week of February.

Join Zoom Meeting
https://zoom.us/j/4377592799

Timezone?
Education Meeting Today @ 09:30 UK / 10:30 Brussels / 15:00 IST / 17:30 CST / 18:30 KST + JST


Education Meeting Today @ 09:30 UK / 10:30 Brussels / 15:00 IST / 17:30 CST / 18:30 KST + JST

 

Heads up. We need your assistance. We are finalizing the online course and have a few items for review.

As discussed in previous meeting 1st training will be chapters 1-5, training final review date 30 November., public release date by 16th of December.
https://docs.google.com/document/d/1FA6GvYG7G-cQgSdAM610CjYQExwJW3xY/edit?usp=sharing&ouid=105868944456094103683&rtpof=true&sd=true

2nd training release will be chapter 6-8 final review date first week of February.

Join Zoom Meeting
https://zoom.us/j/4377592799

Timezone?
Education Meeting Today @ 09:30 UK / 10:30 Brussels / 15:00 IST / 17:30 CST / 18:30 KST + JST


Case Study: Open Source Compliance Automation and Interoperability #4 - How TERN (a container scanner) works both with the graphical tool and when used on its own.

 

The OpenChain automation case study about using open source tools for open source compliance runs between September and December 2021. It is the largest case study ever undertaken in this space. The outcome of attending will include better knowledge of options for automation around open source compliance, a better understanding of interoperability in the space, and an awareness of how to engage with the field in a turn-key manner.

Part #4 explores how TERN (a container scanner) works both with the graphical tool and when used on its own.
https://www.openchainproject.org/featured/2021/10/29/automation-case-study-4


REMINDER: Automation Case Study: TERN and Containers today (27th) at 14:00 UTC / 07:00 PST / 15:00 BST / 16:00 CEST / 19:30 IST / 22:00 CST / 23:00 KST / 23:00 JST

 

A reminder that we go live in one hour. The event will be recorded but attending the live session is recommended.

On Oct 27, 2021, at 12:21, Shane Coughlan <scoughlan@...> wrote:

OpenChain Automation Case Study: TERN and Containers today (27th) at 14:00 UTC / 07:00 PST / 15:00 BST / 16:00 CEST / 19:30 IST / 22:00 CST / 23:00 KST / 23:00 JST.

This is part of our on-going global case study regarding automation ease-of-use and effectiveness demonstrated via a new global GUI and deep-dives on specific tools used.

No registration required.


Automation Case Study: TERN and Containers today (27th) at 14:00 UTC / 07:00 PST / 15:00 BST / 16:00 CEST / 19:30 IST / 22:00 CST / 23:00 KST / 23:00 JST

 

OpenChain Automation Case Study: TERN and Containers today (27th) at 14:00 UTC / 07:00 PST / 15:00 BST / 16:00 CEST / 19:30 IST / 22:00 CST / 23:00 KST / 23:00 JST.

This is part of our on-going global case study regarding automation ease-of-use and effectiveness demonstrated via a new global GUI and deep-dives on specific tools used.

No registration required.


Re: [india-wg] Global work team meeting today at 14:00 UTC / 07:00 PST / 15:00 BST / 16:00 CEST / 19:30 IST / 22:00 CST / 23:00 KST / 23:00 JST

 

Ahead of our call today (in about 45 minutes) here is the newly minted page specifically for the Security Assurance Reference Guide with the first version of the FAQ:
https://www.openchainproject.org/security-guide

On Oct 25, 2021, at 21:17, Shane Coughlan via lists.openchainproject.org <scoughlan=linuxfoundation.org@...> wrote:

Our meeting will focus on suggested expansion of the Security Assurance Reference Guide. Mark Gisi will chair.

Dial in:

https://zoom.us/j/4377592799

Check your timezone:

14:00 UTC / 07:00 PST / 15:00 BST / 16:00 CEST / 19:30 IST / 22:00 CST / 23:00 KST / 23:00 JST

Shane Coughlan
OpenChain General Manager
+818040358083
Book a meeting:
https://meetings.hubspot.com/scoughlan


Global work team meeting today at 14:00 UTC / 07:00 PST / 15:00 BST / 16:00 CEST / 19:30 IST / 22:00 CST / 23:00 KST / 23:00 JST

 

Our meeting will focus on suggested expansion of the Security Assurance Reference Guide. Mark Gisi will chair.

Dial in:


Check your timezone:

14:00 UTC / 07:00 PST / 15:00 BST / 16:00 CEST / 19:30 IST / 22:00 CST / 23:00 KST / 23:00 JST

Shane Coughlan
OpenChain General Manager
+818040358083
Book a meeting:
https://meetings.hubspot.com/scoughlan


Re: OpenChain Telco Work Group Meeting Today 2021-10-21 at 07:00 UTC / 08:00 BST / 09:00 CEST / 15:00 CST / 16:00 KST + JST

 

Heads up… our meeting starts now.

On Oct 21, 2021, at 8:33, Shane Coughlan <scoughlan@...> wrote:

OpenChain Telco Work Group Meeting Today 2021-10-21 at 07:00 UTC / 08:00 BST / 09:00 CEST / 15:00 CST / 16:00 KST + JST

Jimmy from Ericsson will host.
“We hope to continue our discussion started last time on Software Bill of Material and how we best can create alignment and a voluntary best practice "standard" we can adhere to so that whatever is supplied into, our out of the Telco ecosystem is easily digestible in a predictable manner.”

----( Zoom )----
https://zoom.us/j/4377592799


OpenChain Telco Work Group Meeting Today 2021-10-21 at 07:00 UTC / 08:00 BST / 09:00 CEST / 15:00 CST / 16:00 KST + JST

 

OpenChain Telco Work Group Meeting Today 2021-10-21 at 07:00 UTC / 08:00 BST / 09:00 CEST / 15:00 CST / 16:00 KST + JST

Jimmy from Ericsson will host.
“We hope to continue our discussion started last time on Software Bill of Material and how we best can create alignment and a voluntary best practice "standard" we can adhere to so that whatever is supplied into, our out of the Telco ecosystem is easily digestible in a predictable manner.”

----( Zoom )----
https://zoom.us/j/4377592799


Re: Case Study: Open Source Compliance Automation and Interoperability #3 - Video Now Live

 

Apologies. The link to the recording was down for a few minutes. It is back now:
https://www.openchainproject.org/featured/2021/10/15/automation-case-study-3

On Oct 19, 2021, at 17:12, Shane Coughlan <scoughlan@...> wrote:

Part #3 of our epic automation case study explores the Open Source Review Toolkit (ORT) both in the context of the GUI tool from TNG/Facebook and when used on its own.
https://www.openchainproject.org/featured/2021/10/15/automation-case-study-3
This marks the moment when we begin to expand on automation options across the ecosystem in more detail. There are various choices people make when selecting tooling that we hope to unpack here, shortly with TERN, and over time with everything from FOSSology to FOSSLight and beyond.

Coming Next:
• October 27th, we do a deep dive on using TERN via the tool + deep dive into TERN internals engineering.
• November 10th, we do a “how this tool can work with TERN, ORT and ScanOSS in the real-world.”
• November 24th, we do a “fake supply chain” showing code going through multiple scanners and maintaining SPDX Lite integrity.
• December 8th, Facebook Usage Case Study.
• December 16th, A recap of the whole open source tooling eco-system at Open Compliance Summit 2021.
Seen Previously:
• Part #1 explores a new graphical tool from Facebook/TNG to make open source tooling easier to use. Our demo shows ORT calling ScanCode in a clean, simple way. We also discuss how the graphical interface was designed.
• Part #2 explores the engineering behind the new graphical tool from Facebook/TNG that makes open source tooling easier to use.


The Eclipse Foundation Announces It Has Achieved OpenChain ISO 5230 Conformance

 

BRUSSELS – October 19, 2021 – The Eclipse Foundation AISBL, a global community fostering a mature, scalable, and business-friendly environment for software collaboration and innovation, has announced that it is the first open source software foundation to confirm that its open source development and license management processes are OpenChain ISO 5230 conformant.

Learn More:
https://www.openchainproject.org/featured/2021/10/19/eclipse-foundation-conformance


Case Study: Open Source Compliance Automation and Interoperability #3 - Video Now Live

 

Part #3 of our epic automation case study explores the Open Source Review Toolkit (ORT) both in the context of the GUI tool from TNG/Facebook and when used on its own.
https://www.openchainproject.org/featured/2021/10/15/automation-case-study-3 
This marks the moment when we begin to expand on automation options across the ecosystem in more detail. There are various choices people make when selecting tooling that we hope to unpack here, shortly with TERN, and over time with everything from FOSSology to FOSSLight and beyond.

Coming Next:
  • October 27th, we do a deep dive on using TERN via the tool + deep dive into TERN internals engineering.
  • November 10th, we do a “how this tool can work with TERN, ORT and ScanOSS in the real-world.”
  • November 24th, we do a “fake supply chain” showing code going through multiple scanners and maintaining SPDX Lite integrity.
  • December 8th, Facebook Usage Case Study.
  • December 16th, A recap of the whole open source tooling eco-system at Open Compliance Summit 2021.
Seen Previously:

121 - 140 of 252