OpenChain Germany Work Group Meeting # 2
•Download as PPTX, PDF•
0 likes•170 views
The document summarizes the agenda for the OpenChain Germany Meeting #2. It includes reminders about antitrust policies for Linux Foundation meetings and a warning about following the meeting agenda. The agenda then lists topics to be covered: an ISO update scheduled for September 22nd, next steps for Software Bill of Materials and Reference Tooling, the current status of copyright trolling, and an open period for any other business. It closes by providing links for the OpenChain community and certification processes.
Report
Share
Report
Share
Recommended
OpenChain Agenda Partner Meeting 08-05-2019
The Linux Foundation conducts meetings with industry competitors and intends to comply with antitrust and competition laws. Attendees are reminded to follow the meeting agenda and not engage in prohibited discussions or activities regarding prices, costs, production quotas, territories, or allocation of markets. Examples of prohibited actions are described in the Linux Foundation Antitrust Policy available online. Attendees are advised to consult their legal counsel or the Linux Foundation's legal counsel with any antitrust questions.
OpenChain Work Team Agenda 05-06-2019
The document provides an antitrust policy notice for Linux Foundation meetings. It states that Linux Foundation meetings involve competitors and the Foundation intends to conduct activities in accordance with antitrust laws. It advises attendees to adhere strictly to meeting agendas and not engage in any prohibited conduct under antitrust laws. Examples of prohibited actions are described in the Foundation's antitrust policy and attendees are advised to consult counsel if they have any questions.
OpenChain Third Monday Work Team Call Agenda 2020-02-17
The document is an antitrust policy notice from the Linux Foundation. It summarizes that Linux Foundation meetings involve competitors and must be conducted according to antitrust laws. Attendees are instructed to follow the agenda and not participate in prohibited discussions about prices, costs, markets or customers. Examples of prohibited actions are described in the Linux Foundation Antitrust Policy available online. Attendees with questions should contact their legal counsel or the Linux Foundation's legal counsel.
OpenChain Work Team Call 05-20-2019
The document summarizes an antitrust policy notice from the Linux Foundation. It states that Linux Foundation meetings involve competitors and must be conducted according to antitrust laws, and attendees should not participate in prohibited discussions. Examples of prohibited actions are described in the Foundation's antitrust policy available online. Attendees with questions should contact their legal counsel or the Foundation's counsel.
OpenChain Agenda 08-05-2019
The document provides the agenda and notes for a Linux Foundation meeting. It begins with an antitrust policy notice reminding attendees that Linux Foundation meetings involve competitors and must adhere to antitrust laws. The agenda then lists items including a project update, guest talk, curriculum comments, ISO spec review, and time for other business. Key discussion topics are an update on new OpenChain conformant companies, an upcoming OpenChain event, and a review of the ISO specification.
OpenChain Work Team Agenda 04-01-2019
The document provides an antitrust policy notice for Linux Foundation meetings. It states that Linux Foundation meetings involve competitors and will be conducted according to antitrust laws, and attendees should adhere strictly to meeting agendas and not engage in any prohibited antitrust behaviors. Examples of prohibited behaviors are described in the Linux Foundation Antitrust Policy and attendees with questions should contact their legal counsel or the Linux Foundation's legal counsel.
OpenChain Agenda 09-23-2019
The document provides an antitrust policy notice for Linux Foundation meetings. It states that Linux Foundation meetings involve competitors, so activities must adhere to antitrust laws. Examples of prohibited actions are described in the Foundation's antitrust policy, and attendees should contact their legal counsel if they have questions.
Openchain First Monday Agenda 01-07-2019
The document provides an antitrust policy notice for Linux Foundation meetings, stating that meetings involve industry competitors and must be conducted in accordance with antitrust laws, prohibiting activities like price fixing or allocating customers. Attendees are told to follow meeting agendas and not engage in prohibited antitrust behaviors, with examples provided in the Linux Foundation Antitrust Policy and contact information for legal counsel provided.
Recommended
OpenChain Agenda Partner Meeting 08-05-2019
The Linux Foundation conducts meetings with industry competitors and intends to comply with antitrust and competition laws. Attendees are reminded to follow the meeting agenda and not engage in prohibited discussions or activities regarding prices, costs, production quotas, territories, or allocation of markets. Examples of prohibited actions are described in the Linux Foundation Antitrust Policy available online. Attendees are advised to consult their legal counsel or the Linux Foundation's legal counsel with any antitrust questions.
OpenChain Work Team Agenda 05-06-2019
The document provides an antitrust policy notice for Linux Foundation meetings. It states that Linux Foundation meetings involve competitors and the Foundation intends to conduct activities in accordance with antitrust laws. It advises attendees to adhere strictly to meeting agendas and not engage in any prohibited conduct under antitrust laws. Examples of prohibited actions are described in the Foundation's antitrust policy and attendees are advised to consult counsel if they have any questions.
OpenChain Third Monday Work Team Call Agenda 2020-02-17
The document is an antitrust policy notice from the Linux Foundation. It summarizes that Linux Foundation meetings involve competitors and must be conducted according to antitrust laws. Attendees are instructed to follow the agenda and not participate in prohibited discussions about prices, costs, markets or customers. Examples of prohibited actions are described in the Linux Foundation Antitrust Policy available online. Attendees with questions should contact their legal counsel or the Linux Foundation's legal counsel.
OpenChain Work Team Call 05-20-2019
The document summarizes an antitrust policy notice from the Linux Foundation. It states that Linux Foundation meetings involve competitors and must be conducted according to antitrust laws, and attendees should not participate in prohibited discussions. Examples of prohibited actions are described in the Foundation's antitrust policy available online. Attendees with questions should contact their legal counsel or the Foundation's counsel.
OpenChain Agenda 08-05-2019
The document provides the agenda and notes for a Linux Foundation meeting. It begins with an antitrust policy notice reminding attendees that Linux Foundation meetings involve competitors and must adhere to antitrust laws. The agenda then lists items including a project update, guest talk, curriculum comments, ISO spec review, and time for other business. Key discussion topics are an update on new OpenChain conformant companies, an upcoming OpenChain event, and a review of the ISO specification.
OpenChain Work Team Agenda 04-01-2019
The document provides an antitrust policy notice for Linux Foundation meetings. It states that Linux Foundation meetings involve competitors and will be conducted according to antitrust laws, and attendees should adhere strictly to meeting agendas and not engage in any prohibited antitrust behaviors. Examples of prohibited behaviors are described in the Linux Foundation Antitrust Policy and attendees with questions should contact their legal counsel or the Linux Foundation's legal counsel.
OpenChain Agenda 09-23-2019
The document provides an antitrust policy notice for Linux Foundation meetings. It states that Linux Foundation meetings involve competitors, so activities must adhere to antitrust laws. Examples of prohibited actions are described in the Foundation's antitrust policy, and attendees should contact their legal counsel if they have questions.
Openchain First Monday Agenda 01-07-2019
The document provides an antitrust policy notice for Linux Foundation meetings, stating that meetings involve industry competitors and must be conducted in accordance with antitrust laws, prohibiting activities like price fixing or allocating customers. Attendees are told to follow meeting agendas and not engage in prohibited antitrust behaviors, with examples provided in the Linux Foundation Antitrust Policy and contact information for legal counsel provided.
Openchain First Monday Agenda 02-04-2019
The document summarizes the agenda and discussions from an OpenChain Workgroup meeting held by The Linux Foundation. It notes that antitrust laws must be followed during discussions and provides examples of prohibited actions. It also provides updates on specification work, onboarding processes, and engagement in various countries. Meeting topics included project updates, specification reviews, and the path to conformance.
OpenChain Legal Work Group - 2023-06-29
This document provides notices about anti-trust policies for Linux Foundation meetings. It states that meetings involve industry competitors, so activities must adhere to anti-trust laws. Examples of prohibited actions are described in the Foundation's anti-trust policy and questions can be directed to legal counsel. Previous Legal Work Group calls discussed model contract provisions for OpenChain standards adoption. The current call will involve live editing the newest draft of these model provisions.
OpenChain Export Control Work Group 2024-01-09
This document summarizes an OpenChain Export Control meeting that will take place on January 9, 2023. It includes an anti-trust policy notice reminding participants that Linux Foundation meetings must comply with antitrust laws. The agenda has two items: discussing how the SPDX project's proposed operations profile and export control schema can help with export control work, and reviewing the status of a stalled crypto law survey book to decide how to move it forward.
Openchain AI Study Group 2024-01-23.pptx
The document summarizes an agenda for an OpenChain AI Study Group meeting. It begins with a notice about complying with antitrust laws during Linux Foundation meetings. The agenda then lists the meeting setup and format as the first item, followed by a discussion of goals for the study group around establishing industry agreements on AI management, developing AI principles for supply chain trust, and discussing AI ethics. It poses achieving the goals through weekly meetings and commitment to progress. It concludes by opening the floor for any other business.
OpenChain Japan Work Group Meeting #16 - Remote Meeting #3
The document discusses the International Standard for Open Source Compliance and provides key information about the OpenChain project. It notes that OpenChain is now an ISO international standard and will receive an ISO number within five weeks. It also highlights that those who conform to OpenChain 2.0 will automatically conform to the new ISO 5230 standard. Additionally, it recognizes the large community that has formed around OpenChain, particularly in Japan, and encourages organizations to get started with OpenChain.
OpenChain Work Team Agenda 04-15-2019
The document summarizes an OpenChain Workgroup meeting that covered the following topics:
1) An antitrust policy notice reminding attendees to adhere to meeting agendas and not participate in prohibited antitrust activities.
2) A project update mentioning new partners in Italy and India and increased discussions around automotive.
3) An introduction to the tool ScanCode by guest speaker Michael Herzog.
Openchain Third Monday Agenda 02-18-2019
The document summarizes an agenda for an OpenChain Workgroup meeting held by The Linux Foundation. It reminds attendees that Linux Foundation meetings involve industry competitors and that antitrust laws must be followed. It provides an example of prohibited actions and information on where to find the antitrust policy. It then outlines the agenda items which include a project update on new members and publications, and working on the next version of the OpenChain specification, including seeking public comments.
OpenChain Monthly Meeting North America and Asia - 2024-03-19
The document summarizes the agenda for an OpenChain Monthly North America / Europe Meeting on 2024-03-19. It includes:
1) A notice about complying with antitrust laws and avoiding prohibited discussions.
2) The regular agenda covers sharing news, working on standards and core materials, reference materials, and other business.
3) News items include webinars on GitHub Copilot and export controls, and an OpenChain AI study group call.
4) Work includes discussing issues on the license compliance specification and a security assurance specification on GitHub.
5) Reference and support work involves the OpenChain education study group and supplier education leaflet.
OpenChain Monthly Meeting (US / Europe) 2023-01-03
The OpenChain monthly meeting covered the following topics:
1. An announcement that six organizations are providing support services for adoption of the OpenChain Security Assurance Specification 1.1.
2. Interneuron completed self-certification of conformance with the Security Assurance Specification in collaboration with Source Code Control.
3. The Security Assurance Specification was handed over to the Joint Development Foundation to undergo the ISO PAS Transposition Process with expected graduation in mid-late 2023.
4. Other meeting items included SPDX Python tool updates, upcoming OSPOlogy events, OpenChain automation work, potential specification improvements, and general community updates.
OpenChain North America and Europe Meeting - 2023-04-04
The OpenChain monthly meeting covered the following:
1) An anti-trust policy notice reminding attendees to adhere to meeting agendas and not participate in prohibited antitrust activities.
2) Specification news including OpenChain events in China and a webinar on SBOMs.
3) Work on OpenChain security and licensing standards including proposed issues to address around vulnerability triage, program objectives, and licensing definitions.
4) Announcements from the TODO group on new research on OSPOs and an upcoming survey, and networking opportunities at an upcoming conference.
OpenChain AI Study Group - North America and Europe - 2024-02-20
The document summarizes the agenda and discussion from an OpenChain AI study group meeting on building trust in the open source AI supply chain. The group discussed defining compliance artifacts and how they can be trusted throughout the supply chain. They also considered what constitutes a high-risk artifact and whether compliance should be based on risk type. Additionally, the group discussed achieving transparency in AI systems as models move towards more closed structures, and how to meet the study group's goals of establishing industry agreements on AI management principles.
AI Study Group North America - Europe 2024-02-06
The document summarizes discussions from an OpenChain AI Study Group meeting on anti-trust policy and building trust in the open source AI supply chain. It recaps previous discussions, defines the scope as establishing how to ensure "compliance artifacts" like data cards and model cards can be trusted throughout the supply chain. It also lists AI regulatory frameworks and discusses using cases like delivering pre-trained models or datasets. The appendix section asks for any other business and recaps goals of establishing industry agreements on AI management and developing principles for transparency and bias.
OpenChain Steering Committee Meeting 10-29-2019
OpenChain Steering Committee Meeting 10-29-2019
On the 29th of October the OpenChain Steering Committee formally convened for a vote on the version of the OpenChain Specification entering the ISO standardization process.
OpenChain AI Study Group - Europe and Asia Recap - 2024-04-11 - Full Recording
The document summarizes a meeting of the OpenChain AI Study Group that recapped a previous workshop on AI compliance in the supply chain. It discusses identifying commonalities between AI compliance and the ISO 5230 standard on software supply chain security. It provides examples of reviewing and redlining the ISO 5230 standard and a related thinking document. The document also suggests starting a review of the ISO 42001 standard on AI management systems while noting it is not freely available. It asks if there is any other business and concludes by thanking and saying goodbye to attendees.
OpenChain Germany Work Group Meeting 1
The document summarizes the first meeting of the OpenChain Germany Work Group. It discusses antitrust policies for Linux Foundation meetings and provides an agenda for the meeting. The agenda includes discussions of OpenChain becoming an ISO standard, developments in regional and automotive work groups, partner activities, and upcoming initiatives. It also summarizes the establishment of the first German work group meeting with 38 people from 29 companies in Nuremberg.
FINOS June 2018 Members Meeting - How FINOS Collaboration Works - Aaron Willi...
How FINOS Collaboration Works during the FINOS June 2018 Members Meeting by Aaron Williamson, General Counsel & Director, FINOS
OpenChain Monthly North America / Europe Call - 2024-02-06
The OpenChain monthly meeting covered the following topics:
1) An announcement about upcoming OpenChain elections for working group chair positions and the process for nominations and voting.
2) An update on recent and upcoming calls for the AI Study Group exploring how to build trust in the open source AI supply chain.
3) A discussion of open issues for the ISO security and licensing standards being developed by OpenChain.
4) An early proposal to develop an OpenChain contribution process specification and a link to the draft document and issues.
5) An update that the OpenChain reference training slides are being finalized this week.
6) A summary of a recent Legal Work Group meeting on maturity models
OpenChain Work Team Call Agenda 03-18-2019
The document provides an agenda and notes for an OpenChain Workgroup meeting. It discusses that Fujitsu has joined as the latest Platinum Member. It also notes that the OpenChain conformance website is now live in English and Japanese, and that OpenChain will co-host an event in Shenzhen on March 22nd. The meeting will include a guest speaker on the In-Toto project and how it can support OpenChain conformance. It will also discuss finalizing the Path to Conformance document and reviewing content for Level 1 conformance. The latest draft of the OpenChain Specification 2.0 is available for review.
OpenChain Monthly Meeting North America - Europe - 2023-02-07
The OpenChain monthly meeting covered several topics:
1. An anti-trust policy notice reminding attendees to adhere to agendas and not participate in prohibited antitrust activities.
2. Specification news including recent adoption of security assurance specifications, a new third-party certifier, and updates to free online training courses.
3. Work on standards and core materials including proposed changes to open source definitions and discussions of issues raised on GitHub regarding adding new definitions, requirements, and references to ISO standards within the Security Assurance Specification.
OpenChain Monthly Meeting 2023-02-21 (North America and Asia)
The document summarizes the agenda and discussions from an OpenChain monthly meeting on February 21, 2023. Key discussion points included:
- Reminders about anti-trust policies for the meeting.
- Updates on adoption of OpenChain specifications, security assurance certification programs, and free online training courses.
- Discussion of definitions in the specifications to harmonize licensing and security definitions.
- Proposed changes to the security assurance specification in response to issues raised on GitHub, including adding definitions for "remediate" and "mitigate", adding requirements under the "Competence" category, and including references to relevant ISO standards.
openEuler Case Study - The Journey to Supply Chain Security
openEuler Case Study - The Journey to Supply Chain Security
More Related Content
Similar to OpenChain Germany Work Group Meeting # 2
Openchain First Monday Agenda 02-04-2019
The document summarizes the agenda and discussions from an OpenChain Workgroup meeting held by The Linux Foundation. It notes that antitrust laws must be followed during discussions and provides examples of prohibited actions. It also provides updates on specification work, onboarding processes, and engagement in various countries. Meeting topics included project updates, specification reviews, and the path to conformance.
OpenChain Legal Work Group - 2023-06-29
This document provides notices about anti-trust policies for Linux Foundation meetings. It states that meetings involve industry competitors, so activities must adhere to anti-trust laws. Examples of prohibited actions are described in the Foundation's anti-trust policy and questions can be directed to legal counsel. Previous Legal Work Group calls discussed model contract provisions for OpenChain standards adoption. The current call will involve live editing the newest draft of these model provisions.
OpenChain Export Control Work Group 2024-01-09
This document summarizes an OpenChain Export Control meeting that will take place on January 9, 2023. It includes an anti-trust policy notice reminding participants that Linux Foundation meetings must comply with antitrust laws. The agenda has two items: discussing how the SPDX project's proposed operations profile and export control schema can help with export control work, and reviewing the status of a stalled crypto law survey book to decide how to move it forward.
Openchain AI Study Group 2024-01-23.pptx
The document summarizes an agenda for an OpenChain AI Study Group meeting. It begins with a notice about complying with antitrust laws during Linux Foundation meetings. The agenda then lists the meeting setup and format as the first item, followed by a discussion of goals for the study group around establishing industry agreements on AI management, developing AI principles for supply chain trust, and discussing AI ethics. It poses achieving the goals through weekly meetings and commitment to progress. It concludes by opening the floor for any other business.
OpenChain Japan Work Group Meeting #16 - Remote Meeting #3
The document discusses the International Standard for Open Source Compliance and provides key information about the OpenChain project. It notes that OpenChain is now an ISO international standard and will receive an ISO number within five weeks. It also highlights that those who conform to OpenChain 2.0 will automatically conform to the new ISO 5230 standard. Additionally, it recognizes the large community that has formed around OpenChain, particularly in Japan, and encourages organizations to get started with OpenChain.
OpenChain Work Team Agenda 04-15-2019
The document summarizes an OpenChain Workgroup meeting that covered the following topics:
1) An antitrust policy notice reminding attendees to adhere to meeting agendas and not participate in prohibited antitrust activities.
2) A project update mentioning new partners in Italy and India and increased discussions around automotive.
3) An introduction to the tool ScanCode by guest speaker Michael Herzog.
Openchain Third Monday Agenda 02-18-2019
The document summarizes an agenda for an OpenChain Workgroup meeting held by The Linux Foundation. It reminds attendees that Linux Foundation meetings involve industry competitors and that antitrust laws must be followed. It provides an example of prohibited actions and information on where to find the antitrust policy. It then outlines the agenda items which include a project update on new members and publications, and working on the next version of the OpenChain specification, including seeking public comments.
OpenChain Monthly Meeting North America and Asia - 2024-03-19
The document summarizes the agenda for an OpenChain Monthly North America / Europe Meeting on 2024-03-19. It includes:
1) A notice about complying with antitrust laws and avoiding prohibited discussions.
2) The regular agenda covers sharing news, working on standards and core materials, reference materials, and other business.
3) News items include webinars on GitHub Copilot and export controls, and an OpenChain AI study group call.
4) Work includes discussing issues on the license compliance specification and a security assurance specification on GitHub.
5) Reference and support work involves the OpenChain education study group and supplier education leaflet.
OpenChain Monthly Meeting (US / Europe) 2023-01-03
The OpenChain monthly meeting covered the following topics:
1. An announcement that six organizations are providing support services for adoption of the OpenChain Security Assurance Specification 1.1.
2. Interneuron completed self-certification of conformance with the Security Assurance Specification in collaboration with Source Code Control.
3. The Security Assurance Specification was handed over to the Joint Development Foundation to undergo the ISO PAS Transposition Process with expected graduation in mid-late 2023.
4. Other meeting items included SPDX Python tool updates, upcoming OSPOlogy events, OpenChain automation work, potential specification improvements, and general community updates.
OpenChain North America and Europe Meeting - 2023-04-04
The OpenChain monthly meeting covered the following:
1) An anti-trust policy notice reminding attendees to adhere to meeting agendas and not participate in prohibited antitrust activities.
2) Specification news including OpenChain events in China and a webinar on SBOMs.
3) Work on OpenChain security and licensing standards including proposed issues to address around vulnerability triage, program objectives, and licensing definitions.
4) Announcements from the TODO group on new research on OSPOs and an upcoming survey, and networking opportunities at an upcoming conference.
OpenChain AI Study Group - North America and Europe - 2024-02-20
The document summarizes the agenda and discussion from an OpenChain AI study group meeting on building trust in the open source AI supply chain. The group discussed defining compliance artifacts and how they can be trusted throughout the supply chain. They also considered what constitutes a high-risk artifact and whether compliance should be based on risk type. Additionally, the group discussed achieving transparency in AI systems as models move towards more closed structures, and how to meet the study group's goals of establishing industry agreements on AI management principles.
AI Study Group North America - Europe 2024-02-06
The document summarizes discussions from an OpenChain AI Study Group meeting on anti-trust policy and building trust in the open source AI supply chain. It recaps previous discussions, defines the scope as establishing how to ensure "compliance artifacts" like data cards and model cards can be trusted throughout the supply chain. It also lists AI regulatory frameworks and discusses using cases like delivering pre-trained models or datasets. The appendix section asks for any other business and recaps goals of establishing industry agreements on AI management and developing principles for transparency and bias.
OpenChain Steering Committee Meeting 10-29-2019
OpenChain Steering Committee Meeting 10-29-2019
On the 29th of October the OpenChain Steering Committee formally convened for a vote on the version of the OpenChain Specification entering the ISO standardization process.
OpenChain AI Study Group - Europe and Asia Recap - 2024-04-11 - Full Recording
The document summarizes a meeting of the OpenChain AI Study Group that recapped a previous workshop on AI compliance in the supply chain. It discusses identifying commonalities between AI compliance and the ISO 5230 standard on software supply chain security. It provides examples of reviewing and redlining the ISO 5230 standard and a related thinking document. The document also suggests starting a review of the ISO 42001 standard on AI management systems while noting it is not freely available. It asks if there is any other business and concludes by thanking and saying goodbye to attendees.
OpenChain Germany Work Group Meeting 1
The document summarizes the first meeting of the OpenChain Germany Work Group. It discusses antitrust policies for Linux Foundation meetings and provides an agenda for the meeting. The agenda includes discussions of OpenChain becoming an ISO standard, developments in regional and automotive work groups, partner activities, and upcoming initiatives. It also summarizes the establishment of the first German work group meeting with 38 people from 29 companies in Nuremberg.
FINOS June 2018 Members Meeting - How FINOS Collaboration Works - Aaron Willi...
How FINOS Collaboration Works during the FINOS June 2018 Members Meeting by Aaron Williamson, General Counsel & Director, FINOS
OpenChain Monthly North America / Europe Call - 2024-02-06
The OpenChain monthly meeting covered the following topics:
1) An announcement about upcoming OpenChain elections for working group chair positions and the process for nominations and voting.
2) An update on recent and upcoming calls for the AI Study Group exploring how to build trust in the open source AI supply chain.
3) A discussion of open issues for the ISO security and licensing standards being developed by OpenChain.
4) An early proposal to develop an OpenChain contribution process specification and a link to the draft document and issues.
5) An update that the OpenChain reference training slides are being finalized this week.
6) A summary of a recent Legal Work Group meeting on maturity models
OpenChain Work Team Call Agenda 03-18-2019
The document provides an agenda and notes for an OpenChain Workgroup meeting. It discusses that Fujitsu has joined as the latest Platinum Member. It also notes that the OpenChain conformance website is now live in English and Japanese, and that OpenChain will co-host an event in Shenzhen on March 22nd. The meeting will include a guest speaker on the In-Toto project and how it can support OpenChain conformance. It will also discuss finalizing the Path to Conformance document and reviewing content for Level 1 conformance. The latest draft of the OpenChain Specification 2.0 is available for review.
OpenChain Monthly Meeting North America - Europe - 2023-02-07
The OpenChain monthly meeting covered several topics:
1. An anti-trust policy notice reminding attendees to adhere to agendas and not participate in prohibited antitrust activities.
2. Specification news including recent adoption of security assurance specifications, a new third-party certifier, and updates to free online training courses.
3. Work on standards and core materials including proposed changes to open source definitions and discussions of issues raised on GitHub regarding adding new definitions, requirements, and references to ISO standards within the Security Assurance Specification.
OpenChain Monthly Meeting 2023-02-21 (North America and Asia)
The document summarizes the agenda and discussions from an OpenChain monthly meeting on February 21, 2023. Key discussion points included:
- Reminders about anti-trust policies for the meeting.
- Updates on adoption of OpenChain specifications, security assurance certification programs, and free online training courses.
- Discussion of definitions in the specifications to harmonize licensing and security definitions.
- Proposed changes to the security assurance specification in response to issues raised on GitHub, including adding definitions for "remediate" and "mitigate", adding requirements under the "Competence" category, and including references to relevant ISO standards.
Similar to OpenChain Germany Work Group Meeting # 2 (20)
OpenChain Japan Work Group Meeting #16 - Remote Meeting #3
OpenChain Japan Work Group Meeting #16 - Remote Meeting #3
OpenChain Monthly Meeting North America and Asia - 2024-03-19
OpenChain Monthly Meeting North America and Asia - 2024-03-19
OpenChain Monthly Meeting (US / Europe) 2023-01-03
OpenChain Monthly Meeting (US / Europe) 2023-01-03
OpenChain North America and Europe Meeting - 2023-04-04
OpenChain North America and Europe Meeting - 2023-04-04
OpenChain AI Study Group - North America and Europe - 2024-02-20
OpenChain AI Study Group - North America and Europe - 2024-02-20
OpenChain AI Study Group - Europe and Asia Recap - 2024-04-11 - Full Recording
OpenChain AI Study Group - Europe and Asia Recap - 2024-04-11 - Full Recording
FINOS June 2018 Members Meeting - How FINOS Collaboration Works - Aaron Willi...
FINOS June 2018 Members Meeting - How FINOS Collaboration Works - Aaron Willi...
OpenChain Monthly North America / Europe Call - 2024-02-06
OpenChain Monthly North America / Europe Call - 2024-02-06
OpenChain Monthly Meeting North America - Europe - 2023-02-07
OpenChain Monthly Meeting North America - Europe - 2023-02-07
OpenChain Monthly Meeting 2023-02-21 (North America and Asia)
OpenChain Monthly Meeting 2023-02-21 (North America and Asia)
More from Shane Coughlan
openEuler Case Study - The Journey to Supply Chain Security
openEuler Case Study - The Journey to Supply Chain Security
OpenChain Webinar: AboutCode and Beyond - End-to-End SCA
OpenChain Webinar: AboutCode and Beyond - End-to-End SCA
OpenChain - The Ramifications of ISO/IEC 5230 and ISO/IEC 18974 for Legal Pro...
OpenChain - The Ramifications of ISO/IEC 5230 and ISO/IEC 18974 for Legal Professionals in 2024
OpenChain Education Work Group Monthly Meeting - 2024-04-10 - Full Recording
The document summarizes the agenda for an Education Work Group call on April 10, 2024. It includes notices about antitrust policies for Linux Foundation meetings and a reminder that activities must comply with applicable competition laws. The document also thanks Nathan and contributors for their work, introduces a new boss, and outlines plans for 2024-2025, which involve continuing work on training slides, reviewing an education leaflet, proposing OpenChain UK education videos, releasing an official SBOM quality reference guide from the Telco Work Group, and creating short explainers to introduce OpenChain within organizations.
OpenChain Webinar: Universal CVSS Calculator
The document discusses antitrust policies for Linux Foundation meetings. It states that Linux Foundation meetings involve competitors and all activities must be in accordance with antitrust laws. Attendees should adhere to meeting agendas and not participate in prohibited activities under antitrust laws. Examples of prohibited actions are described in the Linux Foundation Antitrust Policy available online. Attendees with questions should contact their legal counsel or the Linux Foundation's legal counsel.
openEuler Community Overview - a presentation showing the current scale
OpenEuler is an open source operating system that has seen exponential growth, with over 1.3 million global downloads, 900+ enterprise members, and 14,000+ contributors. It aims to be the number 1 server OS by 2023, with 50%+ estimated market share, by providing a versatile and intelligent OS for all scenarios from server to cloud to edge to embedded devices. OpenEuler also has a thriving ecosystem of over 400 innovation projects and many enterprise and community distributions to satisfy diverse industry requirements.
OpenChain Legal Work Group - 2024-01-17
The document summarizes a meeting of the OpenChain Legal Work Group that discussed maturity models for assessing competence in open source management. It includes:
- An overview of the meeting agenda which focused on a presentation by Andrew Katz of Orcro about their open source maturity model based on ISO/IEC 5230:2020.
- A high-level explanation of capability maturity models and OpenChain's potential as a framework for defining requirements and mapping them to maturity levels for different business functions.
- An example assessment of the maturity of an organization's people, processes, information, and systems for generating software bill of materials, mapping it to relevant ISO requirements.
OpenChain Webinar #58 - FOSS License Management through aliens4friends in Ecl...
The document summarizes Aliens4friends, an Eclipse project that provides tooling for open source license compliance in the Oniro operating system. It discusses key principles of automating compliance work while enabling sustainable human review through reuse. The toolchain gets original source code from the build system, matches components to Debian's reviews, monitors the audit process, and provides a dashboard for visualization. The goal is to implement continuous compliance as a core part of the development workflow.
Maturity Models - Open Compliance Summit 2023
The document discusses a capability maturity model (CMM) for assessing the maturity of an organization's open source software development practices. It presents a five-level maturity framework from initial to optimizing and maps out how capabilities could be assessed across four categories: people and organization, processes, information, and systems. The CMM is aligned with requirements in the OpenChain specification and ISO 5230 standard to provide a potential framework for determining an organization's open source compliance maturity.
OpenChain Annual Report 2023 - Key Metrics Slides
The key strategic goals of the governing board were met over the past year. Several metrics related to standards adoption and conformant programs increased substantially, such as a 22% rise in ISO/IEC 5230 conformant programs and a 500% increase in ISO/IEC 18974 conformant programs. The partner program also expanded in various categories. Future standards developments are being discussed, including proposed updates to the existing standards and new specifications related to contributions and SBOM quality.
OpenChain Webinar 57 - The Open Source Initiative - 2023-11-27
The document discusses defining open source artificial intelligence (AI). It outlines the Open Source Initiative's (OSI) mission to educate about and advocate for open source software. The OSI is working to define open source AI to clarify expectations and match them with policy goals of transparency, trustworthiness, etc. A proposed definition grants users four freedoms: to study and inspect AI systems, use them without permission, modify them, and share modified versions. The OSI will hold an in-person meeting in early 2024 to further develop an open source AI definition.
FOSSLight Community Day 2023-11-30
The OpenChain Project aims to improve open source license compliance and security assurance through international standards. Over 1,000 companies collaborate through OpenChain to develop standards like ISO/IEC 5230 for license compliance and ISO/IEC 18974 for security assurance. Adoption of the standards is growing, with a 12% decrease in license issues and 31% of large German companies planning to adopt ISO/IEC 5230. OpenChain is working to develop new specifications and its global impact and member organizations are increasing.
OpenChain Webinar #56: Generative AI and Your Code
OpenChain Webinar #56: Generative AI and Your Code
Maximizing the Opportunity While Managing the Risks
This webinar had a poll about areas of interest around AI and law. Click here to access it:
https://forms.office.com/r/MaZFgHuH6v
About This Webinar
Generative AI (GAI) provides powerful opportunities for innovation and productivity across all organizational functions – from composing emails and crafting press releases to retouching and refining images and video, all this in seconds. GAI tools can even be used to write, test and improve computer code! This comes with risks that need to be managed within your organization, in order to realize the competitive advantage these GAI tools can provide.
In this webinar, Anthony Decicco and Wael Nackasha, attorneys at GTC Law Group:
- Provide an introduction to GAI and its use to generate software code, text, and images
- Explain how machines learn, including training data and the resulting models
- Cover how developers are using GAI tools (such as GitHub Copilot and ChatGPT) to write and augment source code, with a focus on:
-- A ‘demo’ of how the tools work
-- The community reactions and recent litigation
-- The benefits and risks of the tools
-- Ways to mitigate the risks
-- Best practices for policies and procedures
From One Standard to a Family - Taiwan Work Group - 2023-08-15.pptx
The OpenChain Project started in 2016 to create a standard for open source license compliance that would reduce legal risk for companies. The standard was published in 2016 and became an official International Standard (ISO/IEC 5230) in 2020. In 2021, OpenChain began work on additional standards for using their processes in security and other areas beyond procurement. They quickly developed a new standard, ISO/IEC 18974, for open source security processes that was approved in early 2022. The transformation of OpenChain from a single licensing standard to a broader "family" of standards around open source processes is now complete.
OpenChain Japan Work Group Meeting #28 - 2023-07-11
The OpenChain Industry Survey 2023 had a low response rate of only 18 companies. This was partly due to political issues in how countries were listed and a short two month timeframe. Insights from the survey found that European and North American companies engaged more, over half of companies have over 5,000 software staff, and most see open source as important to their business. The survey also showed growing adoption of OpenChain standards for compliance and security. Deloitte has now become an official partner to help with future surveys.
OpenChain Webinar #53 – OpenSCA
This document introduces OpenSCA, an open source solution for managing open source risks. It discusses the need for such a solution and advantages over traditional commercial solutions. OpenSCA allows flexible and low-cost scanning of software to generate software bills of materials and identify vulnerabilities. It provides results in standard formats and intelligence to subscribers. The community has implemented OpenSCA in DevOps workflows for an internet company to integrate security and identify open source risks introduced in code. The document encourages joining the community to build solutions for more scenarios.
OpenChain Korea Work Group Meeting #18
The OpenChain Korea Work Group Meeting #18 discussed the upcoming conversion of the OpenChain standard to an ISO standard in July. They discussed expanding conformance to the OpenChain standard in China and Europe with new announcements coming. The meeting provided updates on improved online checklists for conformance reporting and specifications beyond OpenChain. It also announced an upcoming webinar on Chinese open source security and their first major OpenChain conference in China. Contact details were provided for Shane Coughlan to discuss further.
2023-06-classic
This document provides an overview of the OpenChain Project, which establishes standards for open source licensing and security. It discusses the OpenChain standards for license compliance (ISO/IEC 5230) and security assurance (ISO/IEC DIS 18974). It highlights that over 1,000 companies are working to improve supply chain management through OpenChain. It also summarizes news and developments around OpenChain standards adoption and certification.
2023-06-cute
The OpenChain Project aims to create and maintain standards for open source licensing and security. It has over 1,000 company members representing trillions in market value. The project develops specifications like ISO 5230 for open source license compliance and a new DIS 18974 for security assurance. It provides free materials to help companies self-certify their supply chain processes and offers third-party certification. The project is expanding its standards, outreach, and community participation to build a more transparent and secure software supply chain.
More from Shane Coughlan (20)
openEuler Case Study - The Journey to Supply Chain Security
openEuler Case Study - The Journey to Supply Chain Security
OpenChain @ LF Japan Executive Briefing - May 2024
OpenChain @ LF Japan Executive Briefing - May 2024
OpenChain Webinar: AboutCode and Beyond - End-to-End SCA
OpenChain Webinar: AboutCode and Beyond - End-to-End SCA
OpenChain - The Ramifications of ISO/IEC 5230 and ISO/IEC 18974 for Legal Pro...
OpenChain - The Ramifications of ISO/IEC 5230 and ISO/IEC 18974 for Legal Pro...
OpenChain Education Work Group Monthly Meeting - 2024-04-10 - Full Recording
OpenChain Education Work Group Monthly Meeting - 2024-04-10 - Full Recording
openEuler Community Overview - a presentation showing the current scale
openEuler Community Overview - a presentation showing the current scale
OpenChain Webinar #58 - FOSS License Management through aliens4friends in Ecl...
OpenChain Webinar #58 - FOSS License Management through aliens4friends in Ecl...
OpenChain Webinar 57 - The Open Source Initiative - 2023-11-27
OpenChain Webinar 57 - The Open Source Initiative - 2023-11-27
OpenChain Webinar #56: Generative AI and Your Code
OpenChain Webinar #56: Generative AI and Your Code
From One Standard to a Family - Taiwan Work Group - 2023-08-15.pptx
From One Standard to a Family - Taiwan Work Group - 2023-08-15.pptx
OpenChain Japan Work Group Meeting #28 - 2023-07-11
OpenChain Japan Work Group Meeting #28 - 2023-07-11
Recently uploaded
Unveiling the Advantages of Agile Software Development.pdf
Learn about Agile Software Development's advantages. Simplify your workflow to spur quicker innovation. Jump right in! We have also discussed the advantages.
Modelling Up - DDDEurope 2024 - Amsterdam
What to do when you have a perfect model for your software but you are constrained by an imperfect business model?
This talk explores the challenges of bringing modelling rigour to the business and strategy levels, and talking to your non-technical counterparts in the process.
Webinar On-Demand: Using Flutter for Embedded
Flutter is a popular open source, cross-platform framework developed by Google. In this webinar we'll explore Flutter and its architecture, delve into the Flutter Embedder and Flutter’s Dart language, discover how to leverage Flutter for embedded device development, learn about Automotive Grade Linux (AGL) and its consortium and understand the rationale behind AGL's choice of Flutter for next-gen IVI systems. Don’t miss this opportunity to discover whether Flutter is right for your project.
ALGIT - Assembly Line for Green IT - Numbers, Data, Facts
Presentation from Ghazal Aakel and Eric Jochum at the GSD Community Stage Meetup on June 6th, 2024
KuberTENes Birthday Bash Guadalajara - Introducción a Argo CD
Charla impartida en el evento de "KuberTENes Birthday Bash Guadalajara" para celebrar el 10mo. aniversario de Kubernetes #kuberTENes #celebr8k8s #k8s
Artificia Intellicence and XPath Extension Functions
The purpose of this presentation is to provide an overview of how you can use AI from XSLT, XQuery, Schematron, or XML Refactoring operations, the potential benefits of using AI, and some of the challenges we face.
Microservice Teams - How the cloud changes the way we work
A lot of technical challenges and complexity come with building a cloud-native and distributed architecture. The way we develop backend software has fundamentally changed in the last ten years. Managing a microservices architecture demands a lot of us to ensure observability and operational resiliency. But did you also change the way you run your development teams?
Sven will talk about Atlassian’s journey from a monolith to a multi-tenanted architecture and how it affected the way the engineering teams work. You will learn how we shifted to service ownership, moved to more autonomous teams (and its challenges), and established platform and enablement teams.
Energy consumption of Database Management - Florina Jonuzi
Presentation from Florina Jonuzi at the GSD Community Stage Meetup on June 06, 2024
GreenCode-A-VSCode-Plugin--Dario-Jurisic
Presentation about a VSCode plugin from Dario Jurisic at the GSD Community Stage meetup
All you need to know about Spring Boot and GraalVM
All you need to know about Spring Boot and GraalVM 🐰
J-Spring 2024 - Going serverless with Quarkus, GraalVM native images and AWS ...
Presented at NLJUG's J-Spring 2024.
What next after learning python programming basics
What next after learning python programming basics
Enums On Steroids - let's look at sealed classes !
These are slides for my session"Enums On Steroids - let's look at sealed classes !" - delivered among others, on Devoxx UK 2024 conference
UI5con 2024 - Keynote: Latest News about UI5 and it’s Ecosystem
Learn about the latest innovations in and around OpenUI5/SAPUI5: UI5 Tooling, UI5 linter, UI5 Web Components, Web Components Integration, UI5 2.x, UI5 GenAI.
Recording:
https://www.youtube.com/live/MSdGLG2zLy8?si=INxBHTqkwHhxV5Ta&t=0
Fundamentals of Programming and Language Processors
Fundamentals of Programming and Language Processors
8 Best Automated Android App Testing Tool and Framework in 2024.pdf
Regarding mobile operating systems, two major players dominate our thoughts: Android and iPhone. With Android leading the market, software development companies are focused on delivering apps compatible with this OS. Ensuring an app's functionality across various Android devices, OS versions, and hardware specifications is critical, making Android app testing essential.
Requirement Traceability in Xen Functional Safety
Using OpenFastTrace to trace requirements in Xen functional safety
Odoo ERP Vs. Traditional ERP Systems – A Comparative Analysis
When it is all about ERP solutions, companies typically meet their needs with common ERP solutions like SAP, Oracle, and Microsoft Dynamics. These big players have demonstrated that ERP systems can be either simple or highly comprehensive. This remains true today, but there are new factors to consider, including a promising new contender in the market that’s Odoo. This blog compares Odoo ERP with traditional ERP systems and explains why many companies now see Odoo ERP as the best choice.
What are ERP Systems?
An ERP, or Enterprise Resource Planning, system provides your company with valuable information to help you make better decisions and boost your ROI. You should choose an ERP system based on your company’s specific needs. For instance, if you run a manufacturing or retail business, you will need an ERP system that efficiently manages inventory. A consulting firm, on the other hand, would benefit from an ERP system that enhances daily operations. Similarly, eCommerce stores would select an ERP system tailored to their needs.
Because different businesses have different requirements, ERP system functionalities can vary. Among the various ERP systems available, Odoo ERP is considered one of the best in the ERp market with more than 12 million global users today.
Odoo is an open-source ERP system initially designed for small to medium-sized businesses but now suitable for a wide range of companies. Odoo offers a scalable and configurable point-of-sale management solution and allows you to create customised modules for specific industries. Odoo is gaining more popularity because it is built in a way that allows easy customisation, has a user-friendly interface, and is affordable. Here, you will cover the main differences and get to know why Odoo is gaining attention despite the many other ERP systems available in the market.
socradar-q1-2024-aviation-industry-report.pdf
SOCRadar's Aviation Industry Q1 Incident Report is out now!
The aviation industry has always been a prime target for cybercriminals due to its critical infrastructure and high stakes. In the first quarter of 2024, the sector faced an alarming surge in cybersecurity threats, revealing its vulnerabilities and the relentless sophistication of cyber attackers.
SOCRadar’s Aviation Industry, Quarterly Incident Report, provides an in-depth analysis of these threats, detected and examined through our extensive monitoring of hacker forums, Telegram channels, and dark web platforms.
Recently uploaded (20)
Unveiling the Advantages of Agile Software Development.pdf
Unveiling the Advantages of Agile Software Development.pdf
ALGIT - Assembly Line for Green IT - Numbers, Data, Facts
ALGIT - Assembly Line for Green IT - Numbers, Data, Facts
KuberTENes Birthday Bash Guadalajara - Introducción a Argo CD
KuberTENes Birthday Bash Guadalajara - Introducción a Argo CD
Artificia Intellicence and XPath Extension Functions
Artificia Intellicence and XPath Extension Functions
Microservice Teams - How the cloud changes the way we work
Microservice Teams - How the cloud changes the way we work
Energy consumption of Database Management - Florina Jonuzi
Energy consumption of Database Management - Florina Jonuzi
All you need to know about Spring Boot and GraalVM
All you need to know about Spring Boot and GraalVM
J-Spring 2024 - Going serverless with Quarkus, GraalVM native images and AWS ...
J-Spring 2024 - Going serverless with Quarkus, GraalVM native images and AWS ...
What next after learning python programming basics
What next after learning python programming basics
Enums On Steroids - let's look at sealed classes !
Enums On Steroids - let's look at sealed classes !
UI5con 2024 - Keynote: Latest News about UI5 and it’s Ecosystem
UI5con 2024 - Keynote: Latest News about UI5 and it’s Ecosystem
Fundamentals of Programming and Language Processors
Fundamentals of Programming and Language Processors
8 Best Automated Android App Testing Tool and Framework in 2024.pdf
8 Best Automated Android App Testing Tool and Framework in 2024.pdf
Odoo ERP Vs. Traditional ERP Systems – A Comparative Analysis
Odoo ERP Vs. Traditional ERP Systems – A Comparative Analysis
OpenChain Germany Work Group Meeting # 2
- 1. OpenChain Germany Meeting # 2
- 2. Antitrust Policy Notice › Linux Foundation meetings involve participation by industry competitors, and it is the intention of the Linux Foundation to conduct all of its activities in accordance with applicable antitrust and competition laws. It is therefore extremely important that attendees adhere to meeting agendas, and be aware of, and not participate in, any activities that are prohibited under applicable US state, federal or foreign antitrust and competition laws. › Examples of types of actions that are prohibited at Linux Foundation meetings and in connection with Linux Foundation activities are described in the Linux Foundation Antitrust Policy available at http://www.linuxfoundation.org/antitrust-policy. If you have questions about these matters, please contact your company counsel, or if you are a member of the Linux Foundation, feel free to contact Andrew Updegrove of the firm of Gesmer Updegrove LLP, which provides legal counsel to the Linux Foundation. 2
- 3. ISO Update – ETA September 22nd
- 4. Software Bill of Materials – Next Steps
- 5. Reference Tooling – Next Steps
- 6. Copyright Trolling – Current Status
- 7. Any Other Business? All voices welcome
- 8. Stay Connected Our community: https://www.openchainproject.org/get-started Self-Certify or Health Check an organization: https://certification.openchainproject.org