John Mertic

Open Source Days 2024

3

Open Source Days 2024 will be held on Sunday, July 28th, 2024 at the Hyatt Regency Denver Convention Center. This is a free event, but registration is required to attend....

Implications of xz Backdoor

4

As requested by @lgritz - short discussion on the implications for our projects. Reading materials: - [Slack Thread discussion](https://academysoftwarefdn.slack.com/archives/CKAH4EU4Q/p1711817642946339) - [@JeanChristopheMorinPerso thoughts](https://hackmd.io/@3nkzuYUOS7G2RgSYdVUsCQ/SkgjLpSyR) - [OpenSSF blog post](https://openssf.org/blog/2024/03/30/xz-backdoor-cve-2024-3094/)

Do we need the JIRA instance anymore?

5

### Please share any additional details on this topic @tykeal was doing some maintainence on the ASWF JIRA instance, and noticed there hasn't been activity for some time. ### Detail...

Part of the ask in #502

Various verbiage clean ups

2

Also called out cases where a lifecycle requirement matched an OpenSSF Best Practices Badge requirement at a higher tier, and removed items in the lifecycle requirements that were duplicative of...

Adjust requirements for the OpenSSF Badge at the Adopted Stage

6

Based on the discussion during the 2023-11-29 TAC Meeting ( agenda item #502 ), this addresses two changes discussed: 1) Change from requiring the achievement of the OpenSSF Best Practices...

Security Threat model analysis for ASWF projects

11

### Please share any additional details on this topic To help address some of the questions on security for projects and to help prepare them for a future security audit,...

OpenQMC

2

https://lists.aswf.io/g/tac/message/2454 **Name of the project (existing or proposed):** OpenQMC **Requested project maturity level (select one): Sandbox or Adopted or Incubation** Sandbox **Project description (please describe the purpose and function of...