This meeting focused on closing two open issues around the Licensing Specification (ISO/IEC 5230) as we prepare a proposed update for the Steering Committee:
The latest OpenChain AI Study Group meeting was hosted by our co-chair, Matthew Crawford of Arm. Check out the full recording and get the slides below.
Caren Kresse from OSADL talks about sharing and reusing publicly available FOSS compliance material, as provided by the OSSelot project (https://www.osselot.org/), which requires trust in the reliability of the data. Such trust can be fostered by ensuring high quality and consistency of the data through a standardized curation process and strict review of all contributions. This presentation will demonstrate the curation process for the OSSelot project, present the resulting material, and give an example of how a contribution is reviewed.
More About Our Webinars:
This event is part of the overarching OpenChain Project Webinar Series. Our series highlights knowledge from throughout the global OpenChain eco-system. Participants are discussing approaches, processes and activities from their experience, providing a free service to increase shared knowledge in the supply chain. Our goal, as always, is to increase trust and therefore efficiency. No registration or costs involved. This is user companies producing great informative content for their peers.
• Recap of discussion so far • Scope – how to build trust in the open source AI supply chain • What are the “compliance artifacts”? • How do we know they can be trusted? • Discuss use cases • Inbound • Deployment internally • Hosting externally • Distributing externally
“Security has continued to be a focus across all our project communities at the Linux Foundation. In today’s blog, we highlight the recent efforts and impact of four Linux Foundation project communities: OpenSSF, FINOS Common Cloud Controls Project, OpenChain, and SPDX. Each community addresses aspects of security from a different perspective and helps contribute to our shared goal of having a more secure software ecosystem for everyone.”