2020-12-01 Meeting notes

Date

01 Dec 2020

Recording

Peter is going to upload it soon.

Attendees

• Shingo Fujimoto

• Takuma Takeuchi
• Peter Somogyvari
• Hart Montgomery
• Joshua Padman
• Wade Mealing

Discussion items

• (1) OpenSSF CII Badge - Vulnerability Reporting Discussion

  • Joshua proposed issue 77 on FOSS.

  • Shingo proposed the architecture of Cactus

  • Joshua questioned about identity. Joshua proposed 2nd mailing list because GitHub is too open to share security information.

  • Wade questioned about how Ledger Plugin connects to different ledgers.

  • Peter said that Plugin should be provided as npm package

  • Cactus is not a final product then we may provide some common issue.  The npm packages without source code?

  • Joshua shared the following URLs.

    • https://core.dpdk.org/security/

    • https://github.com/kubevirt/kubevirt/security/policy

    • https://security.openstack.org/vmt-process.html

    • Wade questioned about timeline. Shingo answered that version 1 will be release on the next spring as we're planning now.
• (2) Release v0.2
  • Release v0.3 will be released on January.  The v0.2 is as-is version.
• (3) Climate SIG - net carbon emissions accounting use case
  • a. Net Emissions Tokens Network
  • b. Utility Emissions Channel
• (4) PR grind
  • PR331: Shingo will comment soon
  • PR337: approved