2020-12-01 Meeting notes

Date

Dec 1, 2020

Recording

Attendees

• @Shingo Fujimoto

• @竹内琢磨

• @Peter Somogyvari

• @Hart Montgomery

• Joshua Padman

• Wade Mealing

Discussion items

• (1) OpenSSF CII Badge - Vulnerability Reporting Discussion

  • Joshua proposed issue 77 on FOSS.

  • Shingo proposed the architecture of Cactus

  • Joshua questioned about identity. Joshua proposed 2nd mailing list because GitHub is too open to share security information.

  • Wade questioned about how Ledger Plugin connects to different ledgers.

  • Peter said that Plugin should be provided as npm package

  • Cactus is not a final product then we may provide some common issue.  The npm packages without source code?

  • Joshua shared the following URLs.

    • https://core.dpdk.org/security/

    • https://github.com/kubevirt/kubevirt/security/policy

    • https://security.openstack.org/vmt-process.html

    • Wade questioned about timeline. Shingo answered that version 1 will be release on the next spring as we're planning now.

• (2) Release v0.2

  • Release v0.3 will be released on January.  The v0.2 is as-is version.

• (3) Climate SIG - net carbon emissions accounting use case

  • a. Net Emissions Tokens Network

  • b. Utility Emissions Channel

• (4) PR grind

  • PR331: Shingo will comment soon

  • PR337: approved