►
From YouTube: OpenSSF Diagrammers Society (June 15, 2023)
Description
Meeting minutes: https://docs.google.com/document/d/1c0YntGi1N7h_0VKgEfKwGO27GuZHL7-IOrAmRm8xSo8/edit#heading=h.9m0zi4b0wnne
B
A
Be
a
moment
to
get
these
things
turned
on.
A
You're
you're,
like
Virginia
emergency
right,
yep,.
C
A
C
A
A
I
have
nothing
planned
but
and
we'll
be
willing
to
participate
in
any
conversation.
Folks
are
interested
in
talking
more
about.
A
I
will
pass
on
kind
of
a
Kudos.
There
is
a
governing
board
member
going
through
and
doing
kind
of
a
audit
State
of
the
Union
of
the
foundation
and
activities
Stephen,
and
he
is
using
the
output
of
this
group
as
some
of
his
reference
material
to
help
him
decode.
What
the
hell
we
do
here
so
that
it
was
nice
that
someone
sees
value
in
the
work
of
this
group
and
they
thought
it
was
helpful.
A
It's
worthwhile
work
just
trying
to
get
a
handle
of
where
we
are
and
see
where.
If
we
need
to
course
correct
or
invest
more
in
one
area,
it
will
try
to
elicit
more
volunteers
here
or
there.
It's
a
good
effort,
I
I'm,
looking
forward
to
the
results
of
the
the
review.
A
B
A
I'm
aware
of
two
possible
efforts
around
that
Jay
just
had
a
riveting
conversation
in
the
governance
committee
about
a
new
devrel
committee,
they're
putting
together
that's
looking,
it's
focused
on
a
subset
of
onboarding
and
engagement,
the
tech
issue
169
or
whatever.
We
don't
have
a
great
interaction.
A
It's
not
easy
for
maintainers
to
understand
what
we
do
and
what
the
value
is
for
them.
So
I
think
that
started
a
broader
conversation
and
people
thinking
about
how
do
we
get
that
onboarding?
So
I
look
forward
to
personally
assigning
an
action
item
to
that
committee
once
it
forms
specific
to
creating
that
you
know
helping
assisted,
creating
that
onboarding
material
and
working
with
some
of
the
stuff
that
Jennifer
already
has
to
try
to
have
those
material.
So
it's
easy
to
get
engaged
and
then
secondarily,
I
just
had
a
phone
call.
A
Earlier
this
week
with
a
young
lady
from
the
LF
Education
team
Cassidy,
she
is
an
instructional
designer
for
LF
education
and
she
is
working
on
a
project
to
create
a
tiny
epic
little
training
classes
that
will
cover
each
of
the
working
groups.
C
Yeah
as
a
quick
comment
for
that
for
that
one
I'm
thinking
it
might
be
better
to
have
a
single
short
one
that
just
kind
of
walks
through
what
are
they
because
yeah?
You
know,
because
if
you
know
which
working
group
you
can
always
start
going
there
but
I
think
the
bigger
problem
is
there's
a
lot
of
parts
here
which
one's
which
yeah.
A
I
agree:
there
needs
to
be
some
type
of
Master
narrative
on
the
top,
but
I
I
also
agree
with
her
that
there
is
value
in
describing
what
that
working
group
does
give
somebody
a
focused
kind
of
little
class
or
whatever
the
heck
it
ends
up
being
to
help
them
do
a
deeper
dive,
but
I
like
the
idea
of
having
an
umbrella
hey.
This
is
the
open
ssf
and
here's
like
how
all
this
stuff
plugs
together
and
how
to
sign
up
and
learn
more
patch
is
welcome
and.
D
A
So
yes,
and
then
David
also
has
the
the
landing
page
idea,
which
is
another
we're
doing
in
the
best
practices
where
we
have
a
lot
of
our
artifacts
for
the
community
and
David
and
Amanda.
A
couple
folks
have
been
working
on
presenting
those
in
a
more
a
cleaner
way
and
that's
another
potential
for
us
to
like
address
the
maintainer
developer
persona.
But
we
may
want
to
think
about
that,
and
you
know
see.
A
C
Yeah
just
to
be
clear,
the
the
landing
page
that
I
just
linked
to,
although
I
put
it
in
the
best
practices
working
group,
be
under
this
I,
propose
in
the
best
work
practices
working
group
merely
because
that
seemed
like
the
best
fit
among
the
working
groups,
but
the
goal
is
not
to
only
list
best
practice.
Working
group
results.
It's
whatever
is
I
think
the
trick
is:
we've
got
a
lot
of
stuff
in
Flight,
that's
in
process
of
development.
The
trick
right
now
is:
okay
developers.
A
And
that
ties
into
the
idea
behind
the
devrel
community
and
the
TAC
issue,
169.,
which
is
probably
one
of
the
best
written
issues,
I've
read
in
a
long
time
that
young
lady
put
together
a
lot
of
thought
into
it
and
offered
some
solutions.
So
I
think
that
there
are
a
lot
of
people
interested
and
it
is
kind
of
confusing
on
knowing
where
to
on
board.
We
all
agree.
D
A
D
Screen
quickly
and
share
those
and
then
I
think
the
next
step.
Yes,
okay,
that
wasn't
free
as
well.
D
I
see
what
you're
saying
yes,
so
this
one,
the
structure.
D
And
then
the
cicd
View
of
how
all
work
together.
A
It
would
be
nice
if
you
know
this
and
not
in
a
presentation,
but
if
it
ended
up
on
the
website,
if
the
viewer
could
hover
over.
Oh,
you
know
I
want
to
look
at
L
and
you
hover
over,
and
that
would
let
you
to
send
you
a
link
over
to
Alpha
and
Omega.
For
example,
it'd
be
nice
just
to
make
it
a
little
interactive
Dynamic
at.
C
F
A
F
E
D
But
you're
welcome,
but
so,
if
we
kind
of
like
this
I'd
like
to
give
the
rest
of
the
deck
over
to
creative
services
to
kind
of
do
their
magic
as
well
sure.
A
F
C
A
F
C
C
F
A
It's
the
blessing
and
curse
of
communal
Google
doc.
Editing,
yes,.
C
F
C
Right
I
mean
if,
if
you
want
pretty
but
simple
I,
think
that
looks
for
I
mean
you
know:
I
was
showing
all
the
hierarchical
lines
and
this
one
doesn't
but
I
mean
just
if
you
assume
that
higher
than
lower
that
would
work,
because
I
think
this
works,
just
as
it
is
yeah.
E
F
C
A
C
C
C
We
should
have
a
landing
page
and
although
I
stuck
in
the
best
breakfast
working
group,
because
I
thought
that
was
the
best,
the
goal
is
to
have
a
bunch
of
people
work
on
it,
and
you
know
if
that
turns
out
to
be
useful.
We
can
maintain
you
that
working
group
can
maintain
it
and
basically
serve
as
a
way
to
help
link
to
everything
else.
That's
been
released,
I
mean
the
other
Alternatives
of
the
attack,
doing
it,
but
I
figure
the
tax
kind
of
busy
grow
up
here
you
can,
you
can
disagree
with
me.
C
A
And
maybe
again,
if,
if
we
turn
our
minds
to
thinking
about
personas
and
user
Journeys,
maybe
your
developer
web
page
that
might
address
the
developer,
maintainer
Persona
that
Journey
potentially
we
want
to
think
about.
A
You
know
longer
term.
How
would
you
potentially
adjust
the
foundation's
landing
page
to
maybe
put
that
make
that
more
prominent,
so
that
a
a
new
person's
coming
in
and
they
could,
you
know,
identify
with
a
journey
or
an
objective
and
have
that
coach
them
through
that
getting
access
to
what
they
were.
Looking
for.
A
But
I
I
like
to
clean
up,
let
me
know
what
I
can
do
to
assist.
Jennifer
I
still
owe
you
geese.
I
just
haven't
well.
D
You
know
so
we
also
spoke
with
creative
services
to
start
getting
some
logos
or
identity
for
each
of
the
open,
ssf
initiatives.
But
honestly,
when
digging
in
it's
not
clear
which
one
is
at
the
level
that
needs
one
or
not
so,
I
think
this
kind
of
corresponds
with
some
of
the
other
work
ongoing
to
really
identify
everything
and
then
that'll
help
make
that
clearer.
A
Well
and
then
I
would
humbly
suggest
that
having
a
some
branding
and
logo
that
might
be
a
criteria
of
maturity
and
membership,
that
a
a
group
has
to
have
certain
criteria,
and
then
you
potentially
have
the
ability
to
request
assistance
in
getting
something
like
that.
Little
carrot.
D
Yeah
I
like
that
too,
are
there
thoughts
at
this
point?
Do
you
think
we
have
that
clearly
defined
like
once?
No
okay,
yeah
I.
E
E
A
Today,
no,
but
that's
something
potentially
like
within
the
LF,
we
could
do
some
Venn,
diagrams
and
kind
of
show
we're
focusing
in
on
supply
chainy
stuff
and
that
touches
on
maybe
cncf
or
CDF
the
other
foundation.
So
we
might
be
able
to
do
like
a
Venn
diagram.
C
Yeah,
except
that
we
already
have
an
AIML
security
working
group
in.
C
That's
correct
it
is.
It
is
a
group
that
is,
it
is
working
to
attempt
to
form
so
so,
as
far
as
the
scoping
I
should
warn
you
that
I
I'm,
okay
with
saying
supply
chain,
but
I'd
interpret
supply
chain
quite
broadly.
So,
if,
if
to,
if
there's
some
something
that
causes
developers
to
always,
you
know
produce
militia,
oh,
not
malicious,
vulnerable
code,
that's
still
within
our
scope,
like
education,
on
how
to
develop
secure
software
is
absolute
in
our
scope.
C
C
B
C
Educational
materials
or
detecting
malicious
components,
or
you
know,
guidance
on
how
to
do
better,
builds
or
look
or
guidance
as
a
consumer
to
look
for
better.
You
know,
you
know
better
things
coming
in
so
basically
being
a
supporting
role.
A
Right
and
omkar
will
be
working
on
helping
better
document
that
better
our
Mission
Vision
strategy
and
roadmap
for
the
foundation
and
then
I'll
be
filtering
that
down
to
the
working
groups,
so
that
that
could
help
people
identify
what
it
truly
is
in
and
out
of
scope,
and
that
helps
us
make
sure
that
things
are
we're
all
kind
of
rowing
in
the
same
direction
towards
that
shared
vision
of
you
know,
whatever
that
ends
up
being,
which
is
going
to
be
some
type
of
Riff
around
open
source
supply
chain
software
supply
chain.
I.
C
F
B
F
Don't
it
was
it
Victor
who
spoke
earlier?
I.
Think
that's
in
very
valid
point,
though,
is
it
would
be
good
for
us
as
an
organization
to
go
through
the
same
exercise
of
saying.
Okay,
what
are
the
things
we
really
don't?
You
know
expect
to
be
done
here.
Right
and
I
mean
there's
a
lot
of
things.
We
said,
oh
yeah,
you
know
we
can't
do
it
all
alone
and
it
makes
no
sense
and
there's
a
lot
of
things
going
on.
F
C
C
If,
if
the
yeah
now
Brian
is
already
going
to
go,
talk
to
the
LFA.
E
C
And
data
folks,
my
understanding
is
that
they
are
already
doing
some
things,
but
not
some
of
the
other
things,
and
so
there's
a
a
you
know:
either
either
try
to
convince
them
to
add
to
their
scope
or
work
out
a
deconflict.
C
A
F
A
Have
a
lot
of
duplication
throughout
the
ecosystem
and
there
are
potentially
people
you
know.
Maybe
the
continuous
delivery
Foundation
is
better
at
talking
about
cicd
stuff
and
we
might
defer
to
their
guidance
or
participate
over
there
as
opposed
to
trying
to
spin
up
our
own
CI
CD
working
group,
for
example,.
C
Right
but
I
would
argue
that
that's
not
so
much
working
out
the
scope
of
the
open
ssf,
that's
just
as
a
matter
of
good
policy
whenever
you're
spinning
up
anything,
Step
One
is
if,
if
I
were
from
an
academic
few,
it's
a
literature
search.
Who
else
is?
Who
else
has
done
that
you
know
and
and
try
to
build
on,
instead
of
just
redo?
C
A
So
today
we
don't
have
the
what's
out
of
scope
Victor,
but
ideally
we're
going
to
put
some
guard
rails
in
place
to
help
make
sure
that
the
foundation
is
doing
is
better
defined,
going
forward.
Yeah.
F
I
I
think
again,
I
I
want
to
reinforce
it.
I
think
that
you
know
I
I
appreciate
this
point,
because
it's
pretty
standard
to
I
mean
no
pun
intended
instead
of
in
standards
organization.
When
the
charter,
you
know
for
a
new
working
group
or
technical
committee
is
proposed,
it
says
what
they're
going
to
do
and
what
they
won't
do
is
very
standard
practice
to
do
this,
because
it
helps
better
Define
the
scope-
and
this
is
not
something
we've
done
so
far.
F
Yes,
but
this
meant
to
be
argumented
and
the
story
reasonable.
You
can
say,
look
there's
this
thing
going
on,
but
we
are
going
to
do
it
because
we're
going
to
take
a
different
approach
and
we
believe
this
is
a
better
because
of
this
or
that
and
then
we
can
say
all
right,
I'll
give
you
that
a
try
and
that's
reasonable,
but
you
can
just
say:
oh
I'm,
going
to
do
this
and
it's
like
wait.
They
are
doing
the
same
there.
Oh
yeah,
well
we'll
collaborate
if
they
care.
C
Also
I
threw
mine
away
before
I
even
changed
jobs,
because
it
was
an
excellent
indicator
of
spam.
I.
F
A
About
oh
and
a
better
strategy
to
address
that,
and
it
reinforces
the
value
proposition
of
the
foundation-
is
we
don't
necessarily
have
to
create
a
group
to
do
that?
We
can
motivate
our
membership
to
go
participate
over
there
as
a
representatives
of
the
foundation
to
show
the
value
that
you
know
the
work
we're
doing
adds
collaborate
and.
A
Anyway,
any
anything
else
about
either
the
the
reworked
diagrams
or
any
other
diagrams.
You
want
to
talk
about
today,
any
other
concerns
we
might
want
to
think
through.
A
I'm
very
excited
about
getting
that
off
the
ground
and
actually
starting
to
do
things.
I
think
there's
going
to
be
some
good
participation
across
the
foundation
to
help
solve
some
that
that
particular
use
case,
but
I
think
when
you
look
at
the
broader,
what
are
the
personas
we're
trying
to
address?
What
are
those
Journeys
and
how
can
we
effectively
communicate
and
illustrate
to
them
to
make
those
connections
with
those
bright
resources?