SBOM WG Meeting Agenda 1/8

Subject: SBOM WG Meeting Agenda 1/8

From: Kay Williams <kayw@microsoft.com>

Date: Tue, 7 Jan 2020 16:40:57 +0000

Accept-language: en-US

Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none

Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=q1JUqznPAVbGZdqpgh4z7T3tBNN/Rc4XoK3SN9lhr1Q=; b=NFXZEnv23z+9wQh4cCePS1gBb1zIdRKcxiowivQupZ+yHPFGauE8+pUnMsGN8o7cuW56HDqoOlIO9onpWLqGpg2Ha1NBteizDybGzbWtz3ZyLtKlZ9jLTep2fkroJT2/y6re8sFMBQZ8qCWjuA/LmrV4x1s96gftopTo8xrlvbIjbQ02BZXl/GGCstieoMYhMDZIoTNqnm5Q3kfyOGystB3eOHgSeTLdJbIHNOehnQwXnx5YzjmvI0gO8fhs2NHNJje8UhCcP243Qbrq2NqfAW1JNyVQx0vLU6EU75MRpixQ68jggEcggFGmYAUFzQLfRwQfnYWccee7Q68ojBrXmg==

Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=AxHu9WnwyJX3syxhhNIeGBem6vzBhckaPaJv1M4oMEi+Cq+itmcdEFVzUuyCo31bzCKXbLuRFhJDTnUT4MXvgsu7aFjxWwgXOEU8saMntkYc+5Kx8mIjtMS4xMyZcCcUjliSa4mFXB5YJBV1U+TOqEJKBVDj8tbrs2S2X7urBVj8CDflaNf39qgUO2s6Uiuz0xRvYED9XqSAKZG5tGEphde/YDYqOfZTve6Uu1krq/KuloIhD5bfBylOARWSDnjFcnYCTTE/vjnk88JsRcliqfPW/Bueqlkl3GWrRFOzJaPGy4A4DugTXJ7IgU9M0fGFBHYIGrvdmrp3W474sLhBjw==

Authentication-results: spf=none (sender IP is ) smtp.mailfrom=kayw@microsoft.com;

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=q1JUqznPAVbGZdqpgh4z7T3tBNN/Rc4XoK3SN9lhr1Q=; b=NNGQPrYO8WZsx86FTQUm+PDUNPG4r5Il03Qu/adSO5l88cMHgTV/akqrCj1VxRNM4tQF1kk+IpY2ZQTvthwllDDHJhBa/YGF4cCcYxKmbwGpYa243oT1shEpUyY10yconcS0zTgSN6+zbCqdNpNYoUP6/7vhaug3Ce9XybxuCFs=

Msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=kayw@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2020-01-07T16:40:55.5964065Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=20c4bab0-fd1c-4f9b-bfda-957848ae4ce1; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic

Thread-index: AdXFeAmYaTET90agQK+TJUW/zgu2Wg==

Thread-topic: SBOM WG Meeting Agenda 1/8

Hi everyone,

Welcome back and best wishes for the new year! We will pick up our regular SBOM meetings beginning tomorrow at 12 PM Pacific. Below is our agenda for tomorrow’s meeting (live document here). Please send any additions, suggestions and clarifications.

Thanks!

Kay

Agenda and Notes:

Housekeeping

Record meeting (prior recordings here)

Upcoming Dates/Meetings

Draft Spec Submission - February 24
RSA Conference Feb 24-28 - San Francisco, CA

Bob Martin, Kay Williams, Bryan Sullivan, Allen Friedman to attend

Next OMG Technical Meeting March 23 - Reston VA

Discussion

Model update - Phillipe-Emmanuel, Gary O’Neall, William Cox, others

Attribute Naming
Relationships Model

Model generation tools

XMI Generation Tools (GenMyModel?)
Documentation Generation Tools (Phillippe-Emmanuel)

Scenarios - Kay

Folder structure here
Scenario Generation Tools?

Database of scenarios
Automatic update/validation on model changes

Website update:

Add a paragraph to describe our process, e.g. understand user scenarios of existing efforts (NTIA software transparency, SPDX, in-toto, CycloneDX and SWID); create a general metadata standard that is suitable across all.