Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add 2024-12-17 Maintainers Meeting notes #46

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Add 2024-12-17 Maintainers Meeting notes #46

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
37 changes: 37 additions & 0 deletions meetings/maintainers/2024/maintainers-2024-12-16.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,37 @@
# GUAC Maintainers Meeting: 2024-12-16

Recording: https://youtu.be/y4EpSe-6ENw

## Attendees

| Name | Email | Affiliation | Pronouns
| ---- | ----- | ----------- | --------
| Ben Cotton | [email protected] | Kusari | he/him
| Marco Deicas | [email protected] | Google | he/him
| Brandon Lum | [email protected] | Google | he/him
| Parth Patel | [email protected] | Kusari | he/him
| Michael Lieberman | [email protected] | Kusari | he/him
| Mihai Maruseac | [email protected] | Google | he/him
| Jeff Mendoza | [email protected] | Kusari | he/him
| Dejan Bosanac | [email protected] | Red Hat | he/him
| Matt Young | [email protected] | TAG Observability | he/him
| Kris Borchers | [email protected] | OpenSSF | he/him

## Agenda

* Welcome new friends
* Matt Young: Met with Mike on Friday and talked about observability and using GUAC in a couple different context such as the landscape-graph , covers quite a bit such as artifacts, commits, blogs, books, tech talks (videos), etc.
* CNCF effort on ontology for kubernetes
* Understanding open source project health & ecosystems
* Kris Borchers: OpenSSF TPM listening in
* [Nathan] “Unblock Included a Handler for CycloneDX Version Ranges” ([guacsec/guac#1789](https://github.com/guacsec/guac/pull/1789))
* Store certifyvex at package with empty string
* Store the version range as part of statement
* Remove graphql
* At query time, use the version range to validate with the purls
* [Ben] Meeting next week (23 Dec) and week after (30 Dec)?
* Will cancel both of those
* [Ben] [Agenda items](https://docs.google.com/document/d/1ImSlr_t3WNZ3zWqpmfqkw1mi6_nkv3enkQ7snWDomKA/edit?tab=t.0#heading=h.a89kkjlbgpca) for Thursday’s community meeting?
* Expected low turnout, so will cancel
* [Parth] Discussion on issue: https://github.com/guacsec/guac/pull/2370
* [Parth] Is the SPDX SBOM valid in this issue? https://github.com/guacsec/guac/issues/2369