May 20, 2025 ‐ 15:00 UTC

Host:

• Troy Sabin
• Philipp Ahmann

Participants:

• Daniel Weingaertner
• Leonardo Rossetti
• Nicole Pappler
• Naoto Yamaguchi
• Sebastian Hetze
• Gabriele Paoloni

Regrets:

Attended Recently

• Patrick Uven
• Victor Lu
• Troy Sabin
• Rinat Shagisultanov
• Walt Miner
• Masanori Itoh
• Kate Stewart
• Karen Bennet
• Slim Dhouibi
• Roberto Paccapeli
• Steven Carbno
• Alfred Strauch
• Olivier Charrier

Topics & Notes:

Cont. Compliance with GitHub Architecture

• Presentation about architecture by Troy
• Introduction to what is intended to do.
  • Many elements with a dashboard and strong SBOM based backbone
  • Links between SBOM elements to external evidence like test results
  • Template to integrate into various CI/CD tooling
• Presenting some architectural block diagram and discussions around it.
  • Some fix to Java based SBOM Diff analysis. This will be shared back to project.
  • Follow up on open points can also happen with the SPDX community meeting after this meeting. https://spdx.dev/engage/participate/technical-team/
• Will be also presented in Denver.

AoB

• Talked to DIN and interested to discuss and participate in the best practices survey. Another meeting in 2 weeks time.
• ELISA Workshop slides not yet published. Waiting for one presentation and need to fix the slide about "Safe Linux vs. Safety Linux"
  • Reworked Safe vs. Safety slides also for AI response clarifications.