Matt Rutkowski

This list of SBOM use cases relative to the data needed under CDX was invaluable to me in assessing completeness of SBOMs during SDLC... https://cyclonedx.org/use-cases/

FWIW, I searched under OSSF (parent) as best I could but did not find one. Pardon if I somehow missed it; regardless, the SIG is still using the private one...

As ante-up/table stakes I liked the idea of having a markdown (prose) file (with recommended H1-Hx structured sections), but also a file (like a ".oss-security[.yaml]) file that enables automation to...

For canonical discussion on illegal access: http://mail.openjdk.java.net/pipermail/jigsaw-dev/2017-May/012673.html See blog discussion of migrating to Java 11, addressing the issue as well: https://blog.codefx.org/java/java-11-migration-guide/

NOTE: ```--illegal-access=permit``` "This will be the default mode for JDK 9. It opens every package in every explicit module to code in all unnamed modules, i.e., code on the class...

@upgle First, I wanted to apologize for not seeing your resolving conflicts on Set 24th. I have been busy and traveling and am now back and have time to dedicate...

The name change was reported independently on issue https://github.com/apache/incubator-openwhisk-package-kafka/issues/312, but the impetus should be on removal of any IBM names where possible.

@starpit I am not opposed to this, but I still view this as a parallel path to what we want to do with making wskdeploy a plug-in of the CLI....

no, just advantaging existing Cobra framework

@markusthoemmes i am open to whatever the "approved" toolchain from GoLang... I will read up on go modules, but had seen other Google lead projects using "dep" and had only...