Hi, What about using Hyperledger on SPDX output as a way to validate the supply chain? My vision is that each member in the supply chain would sign the resulting SPDX document in a Hyperledger thereby creating an immutable record of a large, complex software project as it moves through the supply chain to delivery. These seems to be one of Hyperledger's use cases: "The blockchain platform must provide a means to allow every participant on a supply chain network to input and track sourcing of raw materials, record parts manufacturing telemetry, track provenance of goods through shipping, and maintain immutable records of all aspects of the production and storage of a finished good through to sale and afterwards. In addition to employing both the Business contracts and Asset depository patterns described previously, this case emphasizes the need to provide deep searchability, backwards in time through many transaction layers. This requirement is at the core of establishing provenance for any manufactured good that is built from other component goods."
This would improve the integrity of the SPDX data and the usefulness of SPDX in general. Hyperledger is a project at the Linux Foundation like SPDX. Regards, Jeremiah On Wed, Nov 30, 2016 at 4:08 PM, Kate Stewart <[email protected]> wrote: > Hi, > If you've got ideas for tools to help people use and adopt SPDX, > please > feel free to send them out on this email list, or join the general meeting > tomorrow (see attached). > > We've got some ideas, but would like to make sure we're going > to be focusing on what will be most useful for the communities to > encourage them to use SPDX. > > Thanks, Kate > > ---------- Forwarded message ---------- > From: Phil Odence <[email protected]> > Date: Tue, Nov 29, 2016 at 5:00 PM > Subject: Thursday SPDX General Meeting > To: "[email protected]" <[email protected]> > > > Special Discussion, 2017 Goals- Please bring your thoughts about goals for > next year. After each update, team leads will facilitate some brainstorming > on this subject. The Core Team will finalize and announce formal goal at > the January 5 General Meeting. > > > > > > *GENERAL MEETING* > > > > *Meeting Time:* Thurs, Dec 1, 8am PDT / 10 am CDT / 11am EDT / 15:00 UTC. > http://www.timeanddate.com/worldclock/converter.html > > > *Conf call dial-in:* > > Join the call: https://www.uberconference.com/katestewart > > Optional dial in number: 877-297-7470 > > Alternate number: 512-910-4433 > > No PIN needed > > > > *Administrative Agenda* > > Attendance > > Minutes Approval http://wiki.spdx.org/view/Gene > ral_Meeting/Minutes/2016-11-03 > > > > *Technical Team Report – *Kate/Gary > > > > *Legal Team Report* – Jilayne/Paul > > > > *Business Team Report* – Jack > > > > *Cross Functional Issues* – Phil > > > > > > > > > > > > _______________________________________________ > Spdx mailing list > [email protected] > https://lists.spdx.org/mailman/listinfo/spdx > > > > > -- > Kate Stewart > Sr. Director of Strategic Programs, The Linux Foundation > Mobile: +1.512.657.3669 > Email / Google Talk: [email protected] > > _______________________________________________ > Spdx-tech mailing list > [email protected] > https://lists.spdx.org/mailman/listinfo/spdx-tech > > -- Jeremiah C. Foster GENIVI COMMUNITY MANAGER Pelagicore AB Ekelundsgatan 4, 6tr, SE-411 18 Gothenburg, Sweden M: +1.860.772.9242 [email protected]
_______________________________________________ Spdx-tech mailing list [email protected] https://lists.spdx.org/mailman/listinfo/spdx-tech
