pmonks · @pmonks
148 followers · 2427 posts · Server sfba.social@malwarejake replying only to add some hopefully relevant hashtags that capture more eyeballs: #SBOM #SPDX #CycloneDX
rhaen · @rhaen
191 followers · 102 posts · Server digitalcourage.social
rhaen · @rhaen
191 followers · 108 posts · Server digitalcourage.social
rhaen · @rhaen
191 followers · 104 posts · Server digitalcourage.social
rhaen · @rhaen
191 followers · 100 posts · Server digitalcourage.social
Nicola 💾 · @inknos
48 followers · 110 posts · Server fosstodon.orgIf you never did a Linux contribution, there's a cool #fedora #hackfest happening on the 26 of April. The hackfest will be conducted by #fedoralegal.
It's a great occasion to start understanding how contributions and licenses work. The Hackfest will focus on migrating licenses to the standardized SPDX format.
If you are shy, please don't be. We are always glad to help.
Any questions?
#fedora #hackfest #fedoralegal #fedoradevel #spdx #linux #freesoftware
Fedora Project · @fedora
5389 followers · 281 posts · Server fosstodon.orgFolks from Fedora and Red Hat have been working together on SPDX - "an open standard for communicating software bill of material information." Here's their presentation to the Fedora Council!
https://www.youtube.com/watch?v=be0jfUCZM1M
This is important to Fedora because of our commitment to shipping only FOSS out of the box, but it also has implications in the enterprise. Good stuff!
#Fedora #OpenSource #SPDX
FOSSlife · @fosslife
1569 followers · 74 posts · Server fosstodon.org
New Export SBOM capability allows SBOM generation with one click on @GitHub https://www.fosslife.org/generate-sboms-one-click-github #SBOM #SPDX #security #SoftwareSupplyChain #tools
#SBOM #spdx #security #softwaresupplychain #tools
Evan Prodromou · @evan
5182 followers · 810 posts · Server cosocial.ca
Michał Górny :gentoo: · @mgorny
325 followers · 1417 posts · Server fosstodon.orgSo apparently the `+` #SPDX license expression syntax is "deprecated" except it isn't deprecated in the spec, so new projects are using it. Ofc their uses are absolutely meaningless but they're permitted to, so…
https://github.com/nexB/license-expression/issues/9#issuecomment-1493462932
OpenSSF · @openssf
121 followers · 26 posts · Server social.lfx.dev
SBOM Everywhere Update and Python SPDX-Tools https://openssf.org/blog/2023/03/27/sbom-everywhere-update-and-python-spdx-tools/ #SBOM #SPDX #Python #OSS #OpenSource #OSSsecurity
#sbom #spdx #python #oss #opensource #osssecurity
OpenSSF · @openssf
120 followers · 26 posts · Server social.lfx.devSBOM Everywhere Update and Python SPDX-Tools https://twitter.com/theopenssf/status/1640470630511304707 #SBOM #SPDX #Python #OSS #OpenSource #OSSsecurity
#sbom #spdx #python #oss #opensource #osssecurity
surendra · @surendra
1 followers · 15 posts · Server mastodon.world🐣🗃️🔍 Interlynk is closing out the week with a little gift of #sbomex - Interlynk's #SBOM Explorer - for the SBOM curious.
The CLI-tool helps search and pull Interlynk's public SBOM repository of thousands and increasing #SPDX #CycloneDX SBOMs.
#sbomex #SBOM #spdx #CycloneDX
Mike Dolan · @mdolan
155 followers · 19 posts · Server fosstodon.orgDid you copy and paste the GPLv2? Which variation did you copy? 40+ variations exist on http://fsf.org alone. This is another key reason to use #SPDX Short Identifiers.
Cheuk Ting Ho ☑️ · @cheukting_ho
300 followers · 139 posts · Server fosstodon.org
Jason Perlow ✅🐧🍔 ✍️ · @jperlow
1871 followers · 1194 posts · Server journa.host
Why you should use #SPDX for #security https://www.linux.com/featured/why-you-should-use-spdx-for-security/ #opensource
Matt "msw" Wilson · @msw
2158 followers · 721 posts · Server mstdn.social
For folks who are interested in the #SPDX discussion about adding identifiers for the Open RAIL-M licenses, it's here.
Matija Šuklje · @hook
116 followers · 564 posts · Server toot.siThis is really cool – finally a public collaboratively maintained repo of #SPDX documents about #FOSS components. If it takes off and people actually contribute to it too, this could make FOSS license compliance much easier.
Sharing is caring, and reusing is a must :)
#spdx #foss #licensecompliance
Nico Rikken · @nicorikken
33 followers · 57 posts · Server mastodon.nl
Come share knowledge among #OSPO's at the two day #OSPOlogy Live 🇳🇱 #event 23-24 January in Amsterdam. Focus on Program and signup at https://community.linuxfoundation.org/events/details/lfhq-ospology-european-chapter-presents-ospologylive-share-learn-netherlands/ #OpenSource event hosted at #Alliander and co-organized with #TODOGroup, #LFEnergy, #OpenChain, #SPDX, #CHAOSS #InnersourceCommons and #OpenSSF.
#OpenSSF #innersourcecommons #chaoss #spdx #openchain #lfenergy #todogroup #alliander #opensource #event #ospology #ospo
Arch Linux · @archlinux
123 followers · 2 posts · Server fosstodon.orgRFC: Using standard SPDX license expressions in PKGBUILDs
https://gitlab.archlinux.org/archlinux/rfcs/-/merge_requests/16
#archlinux #linux #spdx #licensing