Re: proposal for SBoM AP GitHub repo

[Dave Lemire <dave.lemire@g2-inc.com>]

In this case, Duncan is saying he's going to produce a full-blown AP as a standards track work product, so giving it its own repo seems appropriate. Those others are works-in-progress, but as best I know only one of the three, right now, is clearly intended to become standards track.

Dave

David Lemire, CISSP

Systems Engineer

HII Mission Driven Innovative Solutions (HII-MDIS) â formerly G2, Inc.

Technical Solutions Division

302 Sentinel Drive | Annapolis Junction, MD 20701

Email: dave.lemire@g2-inc.com

Work: 301-575-5190 | Mobile: 240-938-9350

On Wed, Dec 11, 2019 at 12:55 PM David Kemp <Dkemp@mobility-challenge.com> wrote:

Might this fall under the CAP repo https://github.com/oasis-open/openc2-custom-aps, where SFPF (and FAM and Email-Gateway) are already housed?

Dave

Â

Â

From: Dave Lemire <dave.lemire@g2-inc.com>
Sent: Wednesday, December 11, 2019 9:39 AM
To: Everett, Alex D <alex.everett@unc.edu>; David Kemp <Dkemp@mobility-challenge.com>; Duncan <duncan@sfractal.com>
Cc: openc2-actuator@lists.oasis-open.org; OpenC2CoChairs <openc2-committee-chairs@lists.oasis-open.org>
Subject: proposal for SBoM AP GitHub repo

Â

At yesterday's AP-SC meeting Duncan Sparrell agreed to edit a proposed Software Bill of Materials (SBoM) Actuator Profile. To request the repo, I need certain data, so this email is to coordinate the details:

Â

GH Repo Name:Â ap-sbom

Â

Maintainers:Â Duncan Sparrell, Alex Everett, David Kemp

(I'm sure Duncan would be happy to have a co-editor)

Â

Description:ÂThis repository provides configuration management and version control for developing the OpenC2 Software Bill of Materials (SBoM) actuator profile. Actuator profiles identify the aspects of the OpenC2 language specification that are mandatory and/or meaningful in the context of a given actuator. Actuator Profiles also identify specifiers and options that are unique to the actuator. This repository will focus on the use of OpenC2 to request and retrieve SBoMs from conformant actuators using industry standard SBoM formats.

Â

PurposeÂStatement:Â(this is optional; Duncan or Alex can supply a purpose if they feel the need.)

Â

Dave

Â

David Lemire, CISSP

Systems Engineer

HII Mission Driven Innovative Solutions (HII-MDIS) â formerly G2, Inc.

Technical Solutions Division

302 Sentinel Drive | Annapolis Junction, MD 20701

Email: dave.lemire@g2-inc.com

Work: 301-575-5190 | Mobile: 240-938-9350