►
From YouTube: SLSA Tooling Meeting (January 6, 2023)
Description
Meeting notes: https://docs.google.com/document/d/15Xp8-0Ff_BPg_LMKr1RIKtwAavXGdrgb1BoX4Cl2bE4/edit#heading=h.yfiy9b23vayj
A
B
D
B
B
A
C
A
B
B
C
B
C
D
C
D
I'm
not
sure
if
anybody
has
any
because
I
know
it's
been
a
few
weeks
so
I
know
some
folks
probably
forgot
that
the
meeting's
still
on
but
we'll
try
and
get
folks
back
on
in
the
coming
weeks.
Now,
because
we're
trying
to
drive
towards
1.0
so
yeah
we
can
get
started
just
as
a
reminder.
This
meeting
is
being
recorded,
it'll
be
uploaded
to
YouTube
shortly
after
and
your
participation
in
this
meeting
is
an
agreement
to
abide
by
the
openssf
code
of
conduct.
D
Okay,
so
anyway,
the
main
agenda
piece
other
than
anything
else
that
that
folks
want
to
bring
up
and
folks
want
to
kind
of
include
in
in
what
we're
doing
one
of
the
things
just
as
an
update
So.
The
plan
is,
you
know,
we're
already
sort
of
I
would
say
like
four
to
five
months
late
on
1.0
for
salsa,
but
the
idea
is
to
get
salsa
out
by
the
end
of
February
to
salsa
1.0
at
the
end
of
February,
with
the
idea.
D
So
we
can
say
you
know
hey
if,
if
there's
a
little
bit
of
confusion
about
what
something
has
meant,
that's
okay,
as
long
as
like
it
is
clear
that,
like
it
doesn't
materially
change,
you
know
some
sort
of
meaning
right.
It's
it's
like
talking
about.
You
know
like
as
an
example
is
the
exact
thing
here.
You
know
when
we
say
hash
are
we
talking
about
which
hash,
algorithms
or
whatever
it's
like?
D
Look
that
is
going
to
get
updated
or
whatever,
but
this
is
what
it
means,
and
this
is
you
know
anyway,
that
that's
kind
of
where
we're
pushing
on
a
lot
of
the
1.0
stuff,
we're
hoping
to
get
that
out
in
Feb
as
part
of
that
we're
going
to
want
to
as
as
part
of
the
salsa
tooling
meeting.
The
thing
that
we're
gonna
want
to
do
is
make
sure
that
we're
prepared
for
all
the
1.0
changes.
D
As
well
as
sort
of
more
non-reproducible
metadata
stuff
like
time
stamps
and
those
things
are
going
into
a
separate
like
metadata
section
of
the
the
salsa
provenance
spec
with
the
intent
there
of
saying
like
hey,
if
you
just
want
to
check,
if
two
metadata,
you
know,
if
two
things
are
the
same,
and
you
want
to
just
look
at
the
those
pieces,
you
could
just
look
at
that
sub
object
in
the
Json
which,
which
you
know
simplifies
a
lot
of
stuff,
as
opposed
to
saying.
Oh
I
need
to
compare
all
of
these
fields.
D
C
Yeah
I
had
a
question:
was
there
like
evidence,
field
going
to
be
added?
I
know
there
were
some
talks
about
that,
like
adding
in
evidence
like
hey,
you
know
for
some
other
things
like
I
have
a
traumatic
or
something
right
it
provided.
Some
kind
of
evidence
is
that
is
that
true,
or
is
that
being
added
or
not
yeah.
D
So
let
me
let
me
look
like
we
could
actually
look
at
the
spec
right
now.
What's
proposed,
there
I
believe
the
idea
was
to
allow
for
it.
The
thing
that
folks
were
talking
about
was
whether
or
not
some
of
the
existing
Fields
can
just
be
used
for
that
information,
and
you
could
just
sort
of
you
know
Point
folks
to
to
that.
B
B
D
Yeah,
no,
it's
it's
still
in
draft,
but
most
of
us
on
you
know.
Most
of
us
have
been
having
chats
in
in
the
the
slack
as
well
as
in
some
of
the
other
ones,
because
there's
the
salsa
specification
meeting,
which
it
happens
on
Monday,
which
is
where
a
lot
of
this
is
a
lot
of
that
discussion,
is,
is
happening
and
it's
it's
a
combination
of
folks.
But
you
know
who
are
part
of
the
committee
and
not.
B
D
D
D
D
The
stuff
that's
in
red,
obviously,
is
the
build
itself
and
then
the
stuff,
that's
in
green
is
stuff.
That's
supposed
to
be
part
of
like
owned
by
the
build
platform
itself.
In
this
case,
you
know
the
build
platform,
any
sort
of
parameters
that
fit
into
the
system,
the
environment
that
that
you're
building
on
and
that
sort
of
thing,
cool,
I,
don't
remember!
If
there's
like
what
else
there
is
here.
D
D
D
C
B
D
D
I
know,
for
example,
like
Brendan
still
out
in
Asia,
and
a
few
other
folks
had
said,
like
yeah
they're
still
on
on
vacation
this
week,
cool
so
yeah.
Just
as
a
reminder,
you
know
we'll
I'll
probably
like
if
folks
have
questions
or
whatever
about
some
of
the
different
salsa
tooling
things
we
can
chat
about
it
in
in
the
slack
I
believe
you
know,
there's
some
talk
here
about
how
what
can
we
do
to
make
you
know?
D
One
of
the
things
we
want
to
do
is
maybe
have
some
canonical
tooling,
which
is
already
something
like
the
salsa
generator
and
salsa
validator.
That
is
under
here,
like
what
can
we
do
to
make
that
1.0,
maybe
a
few
things
to
make
it
easier
to
consume
and
all
that
good
stuff,
but
yeah?
If
that's
it,
everybody
happy
Friday
everybody
and
have
a
good
weekend.