Hi Brandon,
I'm not sure how much I can contribute without some feedback from the
group on the examples:
https://docs.google.com/document/d/1b1dF21miwRTIegwxNM3YZr15YU4kE3rfxeYcn47oPNI/edit?usp=sharing
I would suggest looking at the examples and extracting some patterns.
One pattern I've noticed is whether a build thing is self hosted or
hosted by someone else. Another one is how high the stack is i.e. is it
the build happening on a computer with an OS or a computer with an OS
running a VM or a container with some automation around it. Could all of
these things be called "provider" or "service"?
On 5/24/22 07:32, Brandon Lum via lists.spdx.org wrote:
Hi All,
We've been making some great progress with the Build profiles working
group and Sebastian had the great suggestion of laying out a roadmap,
as we start to finalize on some details and ideas - some of which we
will be bringing to the spdx-tech group.
As an aside, next Monday is memorial day, and most folks will be out,
so we decided to cancel the meeting in favor of an async discussion on
the roadmap, and the concept of ConfigInfo.
*_SPDX Build Profile Roadmap (Draft)_*
- [10 June] Define a proposal of Provider/Service construct (Nisha,
et. al)
- [17 June] Defining the contents of the build profile (5 W's of a build)
- [24 June] Define a proposal of ConfigInfo (Gary, et. al)
- [15 July] Define additional SPDX relationships and how to express
the build profile
Names are there for people who have volunteered/voluntold to help
drive the discussions, proposals are still discussed as a group.
For additional context, here is a definition of ConfigInfo / Provider:
- ConfigInfo: Things like environment variables, parameters or
command/entrypoint. Things that are not files, and so don't quite fit
as a Package.
- Provider/Service: Express the usage of a particular
service/provider. For example, key management/signing service.
Cheers
Brandon
--
nisha
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#4541): https://lists.spdx.org/g/Spdx-tech/message/4541
Mute This Topic: https://lists.spdx.org/mt/91312167/21656
Group Owner: [email protected]
Unsubscribe: https://lists.spdx.org/g/Spdx-tech/unsub [[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-
