----- Original message -----
From: "Robert Varga" <nite@...>
Sent by: lfn-tac@...
To: lfn-tac@...
Cc:
Subject: [EXTERNAL] Re: [lfn-TAC] LFN TAC Meeting Minutes, Feb. 10, 2021
Date: Thu, Feb 11, 2021 1:45 PM
 

Hello everyone,

On 10/02/2021 17:03, Kenny Paul wrote:
> 2021-02-10 TAC Minutes
> <https://wiki.lfnetworking.org/display/LN/2021-02-10+TAC+Minutes>

[snip]

>   * *Next version of LFN Technical Whitepaper Ranny Haiby
>     <https://wiki.lfnetworking.org/display/~rannyh>*
>       o 2021 Whitepaper Workgroup
>         <https://wiki.lfnetworking.org/display/LN/2021+Whitepaper+Workgroup>
>       o Need volunteers to contribute - 1-2 hrs. per week for ~8 weeks
>       o Contributors also include folks that need to review content
>       o Project reps please mentioned at your next TSC meetings
>       o Brian Freeman
>         <https://wiki.lfnetworking.org/display/~bdfreeman1421>  - eval
>         of SolarWinds type of attack on supply chain
>       o Martin Jackson
>         <https://wiki.lfnetworking.org/display/~mhjacks> - Supply chain
>         attacks is top of mind for enterprise - this was already FUD in
>         the enterprise space. Should discuss it head on.

Maven Central has provisions for SBOMs.

Would it make sense to create some guidance as how to deploy
https://github.com/CycloneDX/cyclonedx-maven-plugin in Java projects
based on which https://cyclonedx.org/use-cases/ are deemed critical?

Regards,
Robert