Re: [EXT] Re: [spdx-tech] interactions between profiles

Hi all, At the risk of adding confusion but the intention of helping bring clarity I will offer that the idea is to have a specification with a core that is always needed and then other portions (profiles) of the specification are only used when needed for specific use cases/communities.

Re: [EXT] Re: [spdx-tech] Proposed modifications for Core Profile Template

Hi Gary, Sean’s out for a few days with the family and won’t be on this week’s call. We should tee up for next week. Bob Get Outlook for iOS From: Spdx-tech@lists.spdx.org on behalf of Gary O'Neall Sent: Monday, March 29, 2021 3:56:10 PM

Re: [spdx-tech] Canonicalisation Committee - meeting time poll

I redid mine to reflect Sean's availability too. Right now Sean, Bob, Henk, Sebastian, and David seem to only have 10-11am Friday's matching. Hoping Gary can make that too... Bob Robert (Bob) Martin Sr. Software and Supply Chain

Re: [spdx-tech] Adding Build SBOM relationships for S3C resiliency

Brandon, There is already an SPDX 3.0 working session scheduled for the 15th of April (11am-2pm eastern). Bob Robert (Bob) Martin Sr. Software and Supply Chain Assurance Principal Eng. Cross Cutting Solutions and Innovation Dept Cyber Solutions

[spdx-tech] FYI: [EXT] CISA Releases Hardware Bill of Materials Framework to Improve Supply Chain Risk Management

FYI - Bob Forwarded Message Subject: [EXT] CISA Releases Hardware Bill of Materials Framework to Improve Supply Chain Risk Management Date:

Re: [spdx-tech] Significant announcement from DOD regarding SBOM

Hi Dick, Little clarification - this is a proposed FAR change coming from DoD, GSA, and NASA. If implemented after the public comment period this would be in affect for all government procurements in both the military and civilian sides of

[spdx-tech] SPDX Canonicalisation Committee Meeting

BEGIN:VCALENDAR METHOD:REQUEST PRODID:Microsoft Exchange Server 2010 VERSION:2.0 BEGIN:VTIMEZONE TZID:W. Europe Standard Time BEGIN:STANDARD DTSTART:16010101T03 TZOFFSETFROM:+0200 TZOFFSETTO:+0100 RRULE:FREQ=YEARLY;INTERVAL=1;BYDAY=-1SU;BYMONTH=10 END:STANDARD BEGIN:DAYLIGHT

Re: [spdx-tech] Updated invitation for SPDX Canonicalisation Committee meeting

Sebastian, What is the link for the meeting? Bob Robert (Bob) Martin Sr. Software and Supply Chain Assurance Principal Eng. Cross Cutting Solutions and Innovation Dept Cyber Solutions Innovation Center MITRE Labs MITRE Corporation 781-271-3001o 781-424-4095c

Re: [spdx-tech] Adding Build SBOM relationships for S3C resiliency

Provenance and pedigree are critical aspects that we need to support as either a profile or a element of core. Very interested if working through that. Bob Robert (Bob) Martin Sr. Software and Supply Chain Assurance Principal Eng. Cross Cutting

[spdx-tech] Canceled: SPDX Canonicalisation Committee Meeting

BEGIN:VCALENDAR METHOD:CANCEL PRODID:Microsoft Exchange Server 2010 VERSION:2.0 BEGIN:VTIMEZONE TZID:W. Europe Standard Time BEGIN:STANDARD DTSTART:16010101T03 TZOFFSETFROM:+0200 TZOFFSETTO:+0100 RRULE:FREQ=YEARLY;INTERVAL=1;BYDAY=-1SU;BYMONTH=10 END:STANDARD BEGIN:DAYLIGHT

Re: [spdx-tech] Where did Table 1 go?

Hi Sebastian, Doing a little looking around it appears there were no tables in the SPDX specifications versions 1.0, 2.0, and 2.1. In 2.2 tables appear and there is no table 1 but I believe the table in section 4.4 - a table with formats and

[spdx-tech] Canceled: SPDX Canonicalisation Committee Meeting

BEGIN:VCALENDAR METHOD:CANCEL PRODID:Microsoft Exchange Server 2010 VERSION:2.0 BEGIN:VTIMEZONE TZID:W. Europe Standard Time BEGIN:STANDARD DTSTART:16010101T03 TZOFFSETFROM:+0200 TZOFFSETTO:+0100 RRULE:FREQ=YEARLY;INTERVAL=1;BYDAY=-1SU;BYMONTH=10 END:STANDARD BEGIN:DAYLIGHT

Re: [spdx-tech] Actor datatype

David, That isn’t my recollection of the conversation. Making it a data type breaks huge functionality that is key to linking SBOMs to other enterprise activities. Bob Get Outlook for iOS From: Spdx-tech@lists.spdx.org on behalf of

[spdx-tech] Canceled: SPDX Canonicalisation Committee Meeting

BEGIN:VCALENDAR METHOD:CANCEL PRODID:Microsoft Exchange Server 2010 VERSION:2.0 BEGIN:VTIMEZONE TZID:W. Europe Standard Time BEGIN:STANDARD DTSTART:16010101T03 TZOFFSETFROM:+0200 TZOFFSETTO:+0100 RRULE:FREQ=YEARLY;INTERVAL=1;BYDAY=-1SU;BYMONTH=10 END:STANDARD BEGIN:DAYLIGHT

Re: [spdx-tech] FW: Some fodder for the discussion of blank nodes

And this one also doesn't seem to have made it to the list. Bob From: Sean Barnum Date: Tuesday, August 1, 2023 at 2:06 PM To: Spdx-tech@lists.spdx.org

[spdx-tech] FW: Some further thought and conclusions on the blank node issue

This message from Sean doesn't seem to make it to the SPDX Tech list. Forwarding, Bob     From: Sean Barnum Date:

Re: [spdx-tech] Reminder - timezone change for SPDX tech call

I beg to differ - the meeting is at 9am PDT - noon EDT. Bob Robert (Bob) Martin Sr. Software and Supply Chain Assurance Principal Eng. Cross Cutting Solutions and Innovation Dept Cyber Solutions Innovation Center MITRE Labs MITRE Corporation 781-271-3001o