Wiki

This is an old revision of the document!

Attendees

Shane Coughlan
Hiro Fukuchi
Justin Cappos
Yoshi Kobayashi
Jim Hutchinson
Nobuo Imada
Nathan Kumagai
Mark Gisi
Santiago Torres Arias
Kate Stewart
Endo San

Project Update

Fujitsu has been announced as the latest Platinum Member.
We had a great workshop at the Leadership Summit on March 13th:

tl;dr: OpenChain is going to ISO - Mark Gisi is finalizing the ISO spec (2.0) • Our new conformance web app is now live in English and Japanese: https://certification.openchainproject.org/

OpenChain will co-host an event in Shenzhen on March 22nd.

Case Study: In-Toto

In-Toto - a New York University Project

Over to our guest speaker, Justin Cappos
What is In-Toto?
How can In-Toto support OpenChain Conformance?

in-toto is a general technique for software supply chain enforcement
Cryptographic verification, tamper resistant, provenance, repudiation
Used in many large software companies
We are particularly interested in adding license compliance checking
Try out in-toto! https://in-toto.io

Slides here:

Onboarding Work Team

Finalizing the Path to Conformance, a document that will become a page on the website.
This document is nearly ready and will be featured front and center on the website:

https://docs.google.com/document/d/1ySsqu-XoivV5FrNQOEVdpgfI7Q_ltrkBrD ncayMoy4o/edit

We will go live with the first version of this page for *FRIDAY* at the 22nd March Asian Legal Network workshop in Shenzhen. If possible please cast your eye over the document before then.

Specification Work Team

The latest draft of the next version of OpenChain Specification can be found here:

https://wiki.linuxfoundation.org/_media/openchain/openchainspec-2.0.draft.p df

A marked up version can be found here: https://wiki.linuxfoundation.org/_media/openchain/OpenChainSpec-2.0.draft. MarkUp.pdf
Recent updates can be found in yellow and blue highlights.

Remaining Steps:

Continue to discuss recently received feedback and work through remaining outstanding issues listed on the spec’s github account: https://github.com/OpenChain-Project/Specification/issues
The wider public comments stage has commenced and will concluded on March 22nd
The draft freeze period will begin on March 23rd

Conclusion

The project is moving well towards both greater ease of supply chain adoption and formal standardization.
The next couple of weeks will see some key services and documents released.
The most important deadline is that comments on the Specification update close on *22nd March*