The SPDX project will be hosting an initial working "DocFest" to bring together the producers of SPDX documents and walk through the differences between tools for the same artifacts. Artifacts included in the DocFest will include sources, build assembly, containers, and executable images that can be analyzed.
The goals of this DocFest are to: 1) come to agreement on how the fields should be populated for a given artifact 2) identify instances where different use cases might lead to different choices for fields and structures of documents 3) assess how well the NTIA SBOM minimum elements are covered 4) create a set of reference SPDX SBOMs as part of the corpus for further tooling evaluation. This event will require "sweat equity" - participants are expected to have generated at least one SPDX document from the target set (either source, built from source, built image or container equivalent). Those who have signed up and have submitted files by September 3, 2021, will receive a meeting invite to the DocFest. To indicate interest to participate, please fill in the following form: https://forms.gle/gEfBZfaNmPXUJ6Xg7 Further details on how to participate will be mailed to those that have filled in the form on August 6, 2021. Thanks, DocFest Organizers (Rose, Gary, Kate) -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#4142): https://lists.spdx.org/g/Spdx-tech/message/4142 Mute This Topic: https://lists.spdx.org/mt/84640226/21656 Group Owner: [email protected] Unsubscribe: https://lists.spdx.org/g/Spdx-tech/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
