OpenJS Foundation Security Collab Space Meeting 2024-09-09

[ruddermann]

Time

US PDT Mon 09-September-2024 08:30 AM

Or in your local time:

• https://www.timeanddate.com/worldclock/fixedtime.html?msg=Node.js+Foundation+Security+Collab+Space+Meeting&iso=20240909T0830&p1=224
• or https://www.wolframalpha.com/input?i=8:30am+PDT+Sepember+09+2024+in+local+time

Links

• Minutes Google Doc: https://docs.google.com/document/d/1evmPmlOqALy82ka89dtH2UJhNfes3WUHj2qYtG9_8zA/edit

Agenda

• OpenJS Projects and CVE Numbering Authorities #104
• Becoming a CNA: Take Initial Training #230
• Publish OpenJS SBOM Observations and Recommendations #177

Invited

• OpenJS Foundation Security Collab Space Members
• OpenJS Foundation Cross Project Council
• OpenJS Foundation Project Maintainers
• OpenJS Foundation Board of Directors
• All are welcome

Observers/Guests

Notes

Joining the meeting

Meeting link for participants: https://zoom-lfx.platform.linuxfoundation.org/meeting/98301969246?password=889b7578-29b6-4be9-96c1-f74cbce812c4

• For those who just want to watch: https://livestream.openjsf.org

---

Invitees

Please use the following emoji reactions in this post to indicate your
availability.

• 👍 - Attending
• 👎 - Not attending
• 😕 - Not sure yet

[ruddermann]

Next Steps (also captured in #104)

@rginn: wrt EMCAScript in CNA Scope talk to OpenJS Legal
@ctcpip: wrt EMCAScript, assuming CNA Legal approves, get topic on agenda for ECMAScript meetings in early October
@ruddermann: coordinate with nodejs to deprecate the Node.js CNA
@ruddermann: create task+document next steps on cna@ and security@ mailing lists
@ruddermann create task+document next steps on creating security advisories Github page
@ruddermann: create task+document on documenting CNA processes (eg: publishing CVEs, how projects engage with us)
@ruddermann: coordinate public comms with @rginn and Jen Shelby