FOSDEM 2020 Fringe event on Friday January 31st 2020
Open Chain / Reference Tooling Group Face to Face Meeting
and FOSS license and security compliance tools open workshop and Hackathon

There is a tooling group that cares for open source tools and organizes regular face to face meetings. This is planned in Brussels just before FOSDEM 2020. Since this is FOSDEM, we are also inviting anyone interested in open source license and security compliance tools development to join. The goal of this one day event is for compliance tooling open source developers, users and contributors to:

exchange around tool requirements, plans, ideas and experiences.

hack code together to create some interesting integrations, prototypes, fix bugs, etc.

Join Us

Add your name and interests in the participants table further below. Join this ephemeral chat/IRC channel that we will use to coordinate the event details and unconference planning https://gitter.im/fosdem-2020-foss-tools-day/community

Support Us

If you want to help pay for the costs, please make a donation at Opencollective where we did set up an event to accept donations.
https://opencollective.com/collective/events/fosdem-2020-fringe-event-open-source-compliance-tooling-and-hackathon-day-bruxelles-2020-01-31-689a2454#section-tickets

Update:

At this stage the base costs for the room rent and coffee breaks are covered thanks to donations from these generous donors::

Google LLC https://opensource.google/

HH Partners, Attorneys-at-law https://www.hhpartners.fi/en/

Siemens https://new.siemens.com/

Josh Simmons and Salesforce https://opensource.salesforce.com/

And other generous individual donors!

Further donations will be used to pay for extras stationary/papers to help with planning and possibly offer a lunch if we have enough donations.

Venue

Date	Friday January 31st 2020
Time	09:00AM-17:00PM (Note that the room is available starting at 8:30AM)
Location NEW, changed on Jan 21st	Catarina Meeting Room http://www.catarina-meeting-rooms.be/ Rue Melsens 15 1000 Bruxelles
Location Directions	The Catarina Meeting Room is located downtown Bruxelles close to Place Sainte Catherine and the Sainte Catherine church. Metro: Sainte Catherine/Sint-Katelijne station. This is in the same buildings block as the Ibis Brussels Centre Hotel (where the CHAOSS con takes place the same day). https://www.google.com/maps/place/Catarina+Meeting+Rooms/@50.850593,4.348856,16z/data=!4m5!3m4!1s0x0:0x6420276bb4668d86!8m2!3d50.850593!4d4.3488555?hl=en-US
Emergency Contacts	Michael C. Jaeger, michael.c.jaeger@siemens.com +49 172 491 1997 Philippe Ombredanne, pombredanne@nexb.com +1 650 799 0949 and +33 6 95 53 36 66

Schedule

Time	Item	Remarks
09:00	Informal hello and planning	With a coffee break
09:30	Official start
12:00	Lunch	Lunch is on your own! Place Sainte Catherine has many restaurants and lunch options
13:00	Continue sessions	With a coffee break
16:30	Wrap up
17:00	End

Unconference program pre-planning

This is an unconference event where everyone is encouraged to propose agenda topics or sessions. Read more about unconference here: https://en.wikipedia.org/wiki/Unconference

Propose new sessions below..

The first and last sessions of the day are plenaries used for conference planning and wrap up.

Session Name	Description	Type of session	Moderating / Presenting	Duration and proposed start-end	Add your initials if interested
Introduction and planning	This is a plenary session to plan for the day and select which sessions we want to have	Plenary presentation	M. C. Jaeger P. Ombredanne	30min 9:00AM-9:30AM	everyone
Wrap up session	This is the wrap-up where breakout sessions can present their results and conclusions.	Plenary presentation	M. C. Jaeger P. Ombredanne	30mins 16:300PM-17:00PM	everyone

Propose plenary or breakout sessions as you like in the table below to help with the planning.

Add your initials if you want to participate/express your interest in one of the listed sessions.

Session Name	Description	Type of session / brekout	Moderating / Presenting	Duration and proposed start-end	Add your initials if interested
OSS Reference Toolchain in 15mins	Introduce the effort of building compliance tool entirely OSS for new attendees	O Fendt	15 mins	MCJ
Project intros	Lightning presentations in less than 5 minutes of each project (this would be instead of the other project update sessions planned below)	Plenary	All	1h 9:30AM-10:30AM	NT, MW
From big picture, glossary to process model	The work on the glossary, and the big picture modelling and capabilities is under consolidation. The next step....	Track 1	Michael, Lars, Stefan, Michael	1h 9:30AM-10:30AM	HSCZ, NT, KS
License detection integration prototype	We will work concretely on code integration to Refine/improve the scancode integration in tern	Hackathon, breakout	Philippe Ombredanne and Nisha Kumar (not present so far, 09.30 am)	2 hours	JM
Cross project GSoC Sync	Several projects are likely to participate in the GSoC (Google Summer of Code) . The goal of this session is to sync up on projects ideas that would contribute to integration and automation across projects.	Discussion, plenary	Philippe Ombredanne and...	1 hour	NT
A prototype end to end compliance workflow automation framework	A session to hack a tool to glue together code scanners and other tools in an automation pipeline	Design discussion, breakout	Philippe Ombredanne and...	1.5 hours	CP, NK, JT, HS, CZ, MA, MW, GCs
Tell what us you want: state your most pressing tooling needs and requirements	A conversation where users (and possibly non-technical users) can express their most pressing needs and requirements for open source compliance tooling	Design discussion, breakout	Philippe Ombredanne and ...	1 hour	JT
ScanCode and related projects update	Project Update, presentation	Philippe Ombredanne	5 mins	MW
DoubleOpen update	Demo: showing how we get file & package information out of Yocto/Bitbake	Project demo, presentation	Martin von Willebrand	20 mins	PO, JT, NT, MW, CP
An Intro to the OCI Container Image Format	The Open Container Initiative (OCI) image format is somewhat similar to the Docker image format but for some differences in nomenclature (naming is hard). It still suffers from the problems of meeting license compliance, but forgiving enough that there may be an architectural solution.	Discussion, breakout	Nisha Kumar (not present so far, 09.30 am)	1 hour	PO, AZ, HS, NT, MA, GCs
Fetching and syncing curated data from ClearlyDefined	Hack together a prototype in Python to mirror all ClearlyDefined data (and curated data) (consider also Mirroring built into ClearlyDefined)	Hackathon, Small room	Philippe Ombredanne	1 hour	JM MA CS KS JM
Building the FOSS code matching engine	A session to collect requirements and designs for the last frontier: the fully open source code matching engine alternative to the commercial code matching solutions	Breakout	Philippe Ombredanne	1 hours	AZ, MW
SW360 Updates	What is new to SW360 since last meeting (October 2019)	Project update, presentation	Michael and Lars if he is interested	15 mins	CP CM AZ
FOSSology Updates	...	Project update, presentation	Michael C. Jaeger	15 mins	AZ, NT, MW
Free vulnerability DB	VulnerableCode is creating the commons for a free and open FOSS package vulnerability database. This is a quick intro and status	Project update, presentation	Haiko Schol Philippe Ombredanne	10 mins	HS PO HSCZ, NT, MW
What’s new in SPDX 2.2 and 3.0	Update on SPDX 2.2 and 3.0 ongoing developments - outlining some of the upcoming changes for 2.2 and the current state of discussion regarding 3.0	Project update, presentation	Thomas Steenbergen and TBD (William Bartholomew can cover SPDX 3.0)	20 mins	MW, KS
reuse.software	Project update	Max Mehl
Update on OSS Review Toolkit	Hands-on demo of OSS Review toolkit to show what is new and what are some of the items we are working on...	Project update, presentation, demo	Thomas Steenbergen	45 mins, preferably in the afternoon 2 - 2:45	CP PO HSCZ, MW, KS
Container scanning solutions	There are quite a number of container scanning tools and approaches. Let’s enumerate and characterize/investigate them.	Hackathon, breakout	Jeff McAffer and others	30-60 min	PO OF MA GCs
Tooling Speed dating	Sit with a fellow participant, all of us in pairs. Exchange your needs, concerns and favorite tools. Rotate each two minutes!	Philippe Ombredanne	MW
Add your own session...
Proposal is to have also more material “why open source is the right thing”
How to integrate with EU Initiatives, open certification

Breakouts

Cafeteria	Big room1	Big Room2
SW360	Big picture	SPDX
ClearlyDefined hackathon	Glue	Code matching
Container scanning	Requirements	Security

On event notes

Please add your etherpads to here

https://framapad.org/en/

Planning Notes and suggestions:

Philippe Ombredanne and Michael: we suggest that we have a single plenary session of 60 minutes for project updates that would be 5 minutes for each as lightning talks. Otherwise we could end up spending the day on project updates! -

Participants self-registration

To join please add your name and contact details to this document so we know who will join ahead of time for space planning.

Also: list which projects/topics you are interested in and add your ideas and/or which session you will be interested in above.

Feel free to reach out to the organizers for questions. You can also register by email directly with Philippe Ombredanne or Michael C. Jaeger if you do not want to put your information publicly here.

Name	Contact	Interested in
1	Michael C. Jaeger (organizer)	michael.c.jaeger@siemens.com +49 172 491 1997
2	Philippe Ombredanne (organizer)	pombredanne@nexb.com +1 650 799 0949 +33 6 95 53 36 66 irc:pombreda gh: @pombredanne	scancode, tern, ort, conan, clearlydefined,SPDX, package-url, integrations
3
4
5
6
7
8
9
10
11.
12	Interested in scancode because I use it a lot.
13.
14.
15.
16
17.
18.
19.
20.	Scancode, OSS Reference Toolchain, Building the FOSS code matching engine, SPDX, Free vulnerability DB, ClearlyDefined.
21
22
23.
24.
25.
26.
27.
28.
29.
30.
31
32.
33.
34.
35.
36.
37.
38.
39.
40.
41.
42.
43.
44.
45.
46.
47.
48.	scancode, ACT/ort, tern, clearlydefined, gluecode/integrations
49.
50.
51.	Learning more about license tools, hacking on githubs Licensed-tools and friends.
52
53
54
55	Sw360, vuln mgt tooling, oss tool chains
56	vuln mgmt tooling
57	Observing state of the art in FOSS compliance software, particularly what work (if any) has been done to assist on CCS issues.
58
59
60
61
62
63
64
65

Format of the Event

This is an unconference event. It basically means that everyone is encouraged to propose agenda topics or sessions. Read more about unconference here: https://en.wikipedia.org/wiki/Unconference

Please note that all tooling group face-to-face meetings have been using this unconference approach, so we have always collected input from the participants.

Dial In Instructions

At the scheduled time click to join the voice, video or screen sharing session:

Join using the Circuit Desktop App or mobile app:

circuit://circuit.siemens.com/guest?token=a875b381-ea11-410a-9ee3-9caade8d0213

Join using the Circuit web client or mobile app:

https://circuit.siemens.com/guest?token=a875b381-ea11-410a-9ee3-9caade8d0213

To enjoy the best possible experience while working with Circuit on your desktop computer, try Circuit Desktop App, Chrome or Firefox.

To participate in a voice-only conference, dial one of the following numbers.

PIN 0620 4232 26 #

Join via voice-only. Your microphone will be muted. Press *3 to unmute it.

Frequently used dial-in numbers:

Canada (English): +19292704096 tel:+19292704096,,0620423226#

China, Peoples Republic (中文): 4008198763 (Toll free) tel:4008198763,,0620423226#

Germany (Deutsch): +498923128020 tel:+498923128020,,0620423226#

Spain (Español): +34912158038 tel:+34912158038,,0620423226#

United Kingdom (English): +442076606076 tel:+442076606076,,0620423226#

United States (English): +19292704096 tel:+19292704096,,0620423226#

All dial-in numbers:

Argentina (Español): +541159842552 tel:+541159842552,,0620423226#

Australia (English): +61282784325 tel:+61282784325,,0620423226#

Austria (Deutsch): +4313602774621 tel:+4313602774621,,0620423226#

Belgium (Français): +3226200317 tel:+3226200317,,0620423226#

Brazil (English): +551138788268 tel:+551138788268,,0620423226#

Bulgaria (English): +35929358238 tel:+35929358238,,0620423226#

Canada (Français): +18887768707 tel:+18887768707,,0620423226#

Canada (English): +18887768708 tel:+18887768708,,0620423226#

Canada (English): +19292704096 tel:+19292704096,,0620423226#

Canada (Français): +15148412132 tel:+15148412132,,0620423226#

Chile (Español): +56226188362 tel:+56226188362,,0620423226#

China, Peoples Republic (中文): 4008198763 (Toll free) tel:4008198763,,0620423226#

Colombia (Español): +5714864866 tel:+5714864866,,0620423226#

Costa Rica (Español): +50625397362 tel:+50625397362,,0620423226#

Croatia (English): +38517776197 tel:+38517776197,,0620423226#

Czech Republic (English): +420225382900 tel:+420225382900,,0620423226#

Denmark (English): +4535158116 tel:+4535158116,,0620423226#

Dominican Republic (Español): +18299566315 tel:+18299566315,,0620423226#

Ecuador (Español): +1800000742 tel:+1800000742,,0620423226#

El Salvador (Español): +50321367565 tel:+50321367565,,0620423226#

Estonia (English): +3726868885 tel:+3726868885,,0620423226#

Finland (English): +358981710072 tel:+358981710072,,0620423226#

France (Français): +33185148486 tel:+33185148486,,0620423226#

Germany (Deutsch): +498923128020 tel:+498923128020,,0620423226#

Greece (English): +302111809487 tel:+302111809487,,0620423226#

Guatemala (Español): +50223661200 tel:+50223661200,,0620423226#

Hungary (English): +3614292267 tel:+3614292267,,0620423226#

Indonesia (English): +622129759246 tel:+622129759246,,0620423226#

Ireland (English): +35315339866 tel:+35315339866,,0620423226#

Israel (English): +97237207564 tel:+97237207564,,0620423226#

Italy (Italiano): +390699748020 tel:+390699748020,,0620423226#

Japan (English): +81366344738 tel:+81366344738,,0620423226#

Kazakhstan (English): +77273122918 tel:+77273122918,,0620423226#

Korea South (English): +82264108576 tel:+82264108576,,0620423226#

Latvia (English): +37166163137 tel:+37166163137,,0620423226#

Lithuania (English): +37052141723 tel:+37052141723,,0620423226#

Luxembourg (Français): +35227300013 tel:+35227300013,,0620423226#

Malaysia (English): +60320535108 tel:+60320535108,,0620423226#

Mexico (Español): +525550912420 tel:+525550912420,,0620423226#

Morocco (English): +212520480311 tel:+212520480311,,0620423226#

Netherlands (English): +31207219093 tel:+31207219093,,0620423226#

Norway (English): +4723500290 tel:+4723500290,,0620423226#

Oman (English): +96880074490 tel:+96880074490,,0620423226#

Oman (English): 80074490 (Toll free) tel:80074490,,0620423226#

Pakistan (English): +92518108858 tel:+92518108858,,0620423226#

Peru (Español): +5117087113 tel:+5117087113,,0620423226#

Philippines (English): +6323953534 tel:+6323953534,,0620423226#

Poland (English): +48225048376 tel:+48225048376,,0620423226#

Portugal (English): +351210608117 tel:+351210608117,,0620423226#

Romania (English): +40311305020 tel:+40311305020,,0620423226#

Russian Federation (Русский): +73433511796 tel:+73433511796,,0620423226#

Russian Federation (Русский): +74232492964 tel:+74232492964,,0620423226#

Russian Federation (Русский): +74957459864 tel:+74957459864,,0620423226#

Russian Federation (Русский): +78127186937 tel:+78127186937,,0620423226#

Singapore (English): +6563131571 tel:+6563131571,,0620423226#

Slovakia (English): +421250112159 tel:+421250112159,,0620423226#

Slovenia (English): +38616002736 tel:+38616002736,,0620423226#

South Africa (English): +27118446101 tel:+27118446101,,0620423226#

Spain (Español): +34912158038 tel:+34912158038,,0620423226#

Sweden (English): +46851992037 tel:+46851992037,,0620423226#

Switzerland (English): +41225675325 tel:+41225675325,,0620423226#

Thailand (English): +6621040793 tel:+6621040793,,0620423226#

Turkey (English): +902123755830 tel:+902123755830,,0620423226#

United Arab Emirates (English): 800035704335 (Toll free) tel:800035704335,,0620423226#

United Kingdom (English): +442076606076 tel:+442076606076,,0620423226#

United States (English): +19292704096 tel:+19292704096,,0620423226#

Uruguay (Español): +59829028657 tel:+59829028657,,0620423226#

Venezuela (Español): +582123358895 tel:+582123358895,,0620423226#

Vietnam (English): +842844581451 tel:+842844581451,,0620423226#