Emily Fox

Wanted to provide everyone with a quick update. We will be pulling together a group to work thru logistics and planning around the middle of January to get this going....

Reference: https://github.com/oasis-tcs/csaf/blob/master/csaf_2.0/prose/csaf-v2-editor-draft.md per @fkautz as possible discussion point during this.

Another post about this problem space: https://blog.wiz.io/security-industry-call-to-action-we-need-a-cloud-vulnerability-database/

Folks - wanted to provide a quick update here. Over the next two weeks we are giving everyone time to catch up after the holiday break. After which Jan 24th...

can we have a bot to message them when they join the channel with details about getting started "read this, create your first PR with us by tackling a good...

i've also gotten questions about how to lead their first effort. I've been sending them to the process page and linking the to paper process which has some details

This is FANTASTIC! a couple things i can see as specific improvements based on this feedback — @sayantani11 @lumjjb @achetal01 do you think the below should become a separate issue...

I just had a great conversation with @puerco about the Kubernetes SIG-Release process. An excellent way we can get started in this is by applying the supply chain best practices...

+1 to the discussion. Based on what was shared today, we may have a good starting point.

@mlieberman85 I'm not free for the next 3 meetings :(. I don't want to be the hold up for this happening: * A more in-depth presentation/discussion with SIG Release to...