Thanks for pulling this together, this is very useful. I just dropped in some initial thoughts.
William Sent from Outlook<http://aka.ms/weboutlook> ________________________________ From: [email protected] <[email protected]> on behalf of Brandon Lum via lists.spdx.org <[email protected]> Sent: Saturday, April 16, 2022 11:08 AM To: [email protected] <[email protected]> Subject: [EXTERNAL] Re: [spdx-tech] Adding Build SBOM relationships for S3C resiliency Pre-sharing the document I've been stitching together (don't treat it as final/complete- more as a jumping off point for discussion, would like more input from folks that are more familiar with reproducible builds). Looking forward to more discussions on Monday at the build profile sync! https://docs.google.com/document/d/1D4L4u-YXABMHPYEukE4HiBzslsKoDKueNNIbj6lDA5o/edit?usp=sharing&resourcekey=0-gmG-nkb9ykFNsndBSacE2w<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdocs.google.com%2Fdocument%2Fd%2F1D4L4u-YXABMHPYEukE4HiBzslsKoDKueNNIbj6lDA5o%2Fedit%3Fusp%3Dsharing%26resourcekey%3D0-gmG-nkb9ykFNsndBSacE2w&data=05%7C01%7Cwillbar%40microsoft.com%7C996d054dc77f42a97cc808da1fd42f6b%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637857293849677516%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=qZopTLQzk0AihfPYFJTiO7SeqJKECc45cG4V9jcROYc%3D&reserved=0> On Tue, Apr 5, 2022 at 11:51 AM Sebastian Crane <[email protected]<mailto:[email protected]>> wrote: Dear Kate, I too would like to attend this - it's a really interesting facet of SPDX as it covers more use-cases. Could it be the following week, as later than the 3.0 focus session would be late evening/night for me here in Britain? Best wishes, Sebastian On Tue, Apr 05, 2022 at 08:21:06AM -0500, Kate Stewart wrote: > Hi Brandon, > > Invitation was sent directly to those who filled in the participation > survey. It's in addition to our regular meeting, with a specific purpose > to help close the 3.0 model punchlist with key stakeholders being present > to make progress. > > I suggest we aim for a spot later that day, or the following week as it > may be a different audience interested in the topic. Send me 1:1 some > options that work for you and I'll start a doodle off on a separate thread, > and we can collect those interested in working on the build profile > definition, then set up an initial meeting. > That work as a plan? > > Thanks, > Kate -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#4459): https://lists.spdx.org/g/Spdx-tech/message/4459 Mute This Topic: https://lists.spdx.org/mt/89846631/21656 Group Owner: [email protected] Unsubscribe: https://lists.spdx.org/g/Spdx-tech/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
