Re: Software Bill of Materials for Fedora

2022-07-14 Thread Jason Shepherd
It's perfect if we can run it on your OpenShift, and only maintain the application itself without having to also maintain OpenShift. We run it on PSI OpenShift Red Hat infrastructure inside the Red Hat firewall for now. We're planning on migrating to Managed Platform Plus before GA in Sept. You

Re: Software Bill of Materials for Fedora

2022-07-11 Thread Kevin Fenzi
On Mon, Jul 11, 2022 at 09:22:48AM -0400, Frank Ch. Eigler wrote: > Hi - > > > [...] Let me know your thoughts. I didn't provide a link to the code > > repository as it's currently private to Red Hat associates. But we > > expect to opensource the project in the coming weeks. At that time > >

Re: Software Bill of Materials for Fedora

2022-07-11 Thread Frank Ch. Eigler
Hi - > [...] Let me know your thoughts. I didn't provide a link to the code > repository as it's currently private to Red Hat associates. But we > expect to opensource the project in the coming weeks. At that time > we'll be able to provide the source code. [...] I suspect your message is hard

Re: Software Bill of Materials for Fedora

2022-07-11 Thread Miroslav Suchý
Dne 11. 07. 22 v 4:53 Jason Shepherd napsal(a): Red Hat Product Security are building an application called Component Registry to meet the requirements set out in the recent Executive Order 14028 [1], "Improving the Nation's Cybersecurity". The executive order requires that software producers

Re: Software Bill of Materials for Fedora

2022-07-11 Thread Pierre-Yves Chibon
On Mon, Jul 11, 2022 at 12:53:57PM +1000, Jason Shepherd wrote: > Hello Fedora Infrastructure team, > > Red Hat Product Security are building an application called Component > Registry to meet the requirements set out in the recent Executive Order > 14028 [1], "Improving the Nation's

Software Bill of Materials for Fedora

2022-07-10 Thread Jason Shepherd
Hello Fedora Infrastructure team, Red Hat Product Security are building an application called Component Registry to meet the requirements set out in the recent Executive Order 14028 [1], "Improving the Nation's Cybersecurity". The executive order requires that software producers and suppliers