[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: Re: CVRF/CSAF "awareness & adoption"
|
That’s a really really good point! The more we communicate adoption and real-world use cases the better. The VEX use case of CSAF will definitely be front center for most vendors. From:
csaf@lists.oasis-open.org <csaf@lists.oasis-open.org> on behalf of duncan sfractal.com <duncan@sfractal.com> I think some discussion of “awareness & adoption” would be useful. Not holding anyone to commitments but companies sharing their current use and future plans wrt both CVRF and CSAF would be useful. In other
meetings (eg CISA SBOM meetings), some people downplay CSAF adoption (“it will take years before VEX profile is used”, “no one uses CVRF”, “there are no tools”, …) and it would help to have some data to counter misconceptions.
I know we get a few statements-of-use prior to passing the standard, but now that CSAF is adopted it might be useful to make more noise on planned use. Given we are now inside the 270-day clock on US Federal
procurement requiring SBOMs, I suspect CSAF/VEX usage will take off. But that’s speculation on my part – actual companies making non-binding statements (keep the lawyers happy) on what they are already doing and what are their plans will carry a lot more weight
than my speculation. -- Duncan Sparrell sFractal Consulting iPhone, iTypo, iApologize I welcome VSRE emails. Learn more at http://vsre.info/ From:
csaf@lists.oasis-open.org <csaf@lists.oasis-open.org> on behalf of Omar Santos (osantos) <osantos@cisco.com> We can definitely put it in the agenda. However, it is really up to the vendor/producer of CVRF documents to decide how long they are supporting CVRF based on their customer usage/demand, etc. I believe that
Feng was just trying to see what other current CVRF producers are planning to do. From:
Stefan Hagen <stefan@hagen.link> Dear members, looking at the "kavi" OASIS workspace of the CSAF TC
I notice that this meeting (once scheduled for today) has been cancelled. Would this topic then discussed on November 16? Best, Stefan On Wed, Oct 26, 2022, at 16:19, Martin Prpič wrote:
|
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]