Fosstodon

0 posts0 participants0 posts today

Fabian Kurz, DJ5CW/SO5CWSnow on the SO5CW webcam this morning! 425 QSOs in the <a href="https://social.darc.de/tags/SPDX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPDX</a> <a href="https://social.darc.de/tags/Contest" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Contest</a> so far. Come join the contest: <a href="https://spdxcontest.pzk.org.pl/2025/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://spdxcontest.pzk.org.pl/2025/</a> <a href="https://social.darc.de/tags/hamradio" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hamradio</a>

anchoreHow do <a href="https://mstdn.business/tags/SBOMs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SBOMs</a> fit into <a href="https://mstdn.business/tags/AI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AI</a>, hardware, and critical infrastructure? SBOMs transformed from static documents to dynamic, database-driven knowledge systems that can scale with today's complex software ecosystems. This session will provide a forward-looking perspective on where SBOM technology is heading, focusing on recent developments in SPDX 3.0 and upcoming features in SPDX 3.1. Kate Stewart (<a href="https://mstdn.business/tags/SPDX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPDX</a>) and Alan Pope (Anchore) discuss the expanding role of SBOMs in modern ... <a href="https://get.anchore.com/future-of-sboms-with-kate-stewart/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://get.anchore.com/future-of-sboms-with-kate-stewart/</a>

anchore<a href="https://mstdn.business/tags/SPDX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPDX</a> 3.0 and the Future of <a href="https://mstdn.business/tags/SBOMs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SBOMs</a>—What's Next? Kate Stewart, a leading force behind SPDX, and Alan Pope of Anchore discuss the latest advancements in SBOMs, regulatory shifts, and integration strategies. Live on March 24 at 10 AM PT. Secure your spot: <a href="https://get.anchore.com/future-of-sboms-with-kate-stewart/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://get.anchore.com/future-of-sboms-with-kate-stewart/</a> <a href="https://get.anchore.com/future-of-sboms-with-kate-stewart/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://get.anchore.com/future-of-sboms-with-kate-stewart/</a>

anchore<a href="https://mstdn.business/tags/SBOMs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SBOMs</a> are evolving—are you ready? Join Kate Stewart (<a href="https://mstdn.business/tags/SPDX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPDX</a>) and Alan Pope (Anchore) on March 24 at 10 AM PT as they explore the next phase of SBOM adoption, including SPDX 3.0/3.1, AI/ML applications, and deeper CI/CD integration. Register now: <a href="https://get.anchore.com/future-of-sboms-with-kate-stewart/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://get.anchore.com/future-of-sboms-with-kate-stewart/</a>

Jürgen... Und schon wieder eine Idee für einen Artikel für die <a href="https://mastodon.social/tags/heimatseite" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#heimatseite</a> im <a href="https://mastodon.social/tags/zwischennetz" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#zwischennetz</a>. Dieses Mal <a href="https://mastodon.social/tags/java" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#java</a>, <a href="https://mastodon.social/tags/sbom" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sbom</a>, <a href="https://mastodon.social/tags/spdx" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#spdx</a> <a href="https://mastodon.social/tags/apacheant" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#apacheant</a> , <a href="https://mastodon.social/tags/apacheivy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#apacheivy</a> und <a href="https://mastodon.social/tags/maven" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#maven</a> ...

anchoreSBOMs are more than an inventory—they're a critical tool for securing modern software development. Our latest guide breaks down @SBOM fundamentals, key standards like <a href="https://mstdn.business/tags/SPDX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPDX</a> and <a href="https://mstdn.business/tags/CycloneDX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CycloneDX</a>, and real-world use cases for security, compliance, and DevSecOps. Download now <a href="https://get.anchore.com/sbom101-guide-for-devsecops-community/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://get.anchore.com/sbom101-guide-for-devsecops-community/</a>

Till KamppeterThe <a href="https://ubuntu.social/tags/LinuxFoundation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LinuxFoundation</a> is accepted as mentoring organization in the Google Summer of Code <a href="https://ubuntu.social/tags/GSoC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GSoC</a> <a href="https://ubuntu.social/tags/GSoC2025" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GSoC2025</a>!Amazing project ideas are waiting for awesome contributors: From <a href="https://ubuntu.social/tags/OpenPrinting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenPrinting</a>, <a href="https://ubuntu.social/tags/Zephyr" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Zephyr</a>, Automotive Grade Linux <a href="https://ubuntu.social/tags/AGL" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AGL</a>, Industrial I/O <a href="https://ubuntu.social/tags/IIO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IIO</a>, Sound Open Firmware <a href="https://ubuntu.social/tags/SOF" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SOF</a>, <a href="https://ubuntu.social/tags/SPDX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPDX</a>, Automating Linux kernel workflows <a href="https://ubuntu.social/tags/kworkflow" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#kworkflow</a> <a href="https://summerofcode.withgoogle.com/programs/2025-ao/organizations/the-linux-foundation" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://summerofcode.withgoogle.com/programs/2025-ao/organizations/the-linux-foundation</a>Project ideas and how to apply: <a href="https://wiki.linuxfoundation.org/gsoc/google-summer-code-2025" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://wiki.linuxfoundation.org/gsoc/google-summer-code-2025</a>If interested to be a contributor or mentor contact us ASAP! Do not wait for the deadline.

anchoreNew in Syft v1.20.0: Bitnami embedded <a href="https://mstdn.business/tags/SBOM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SBOM</a> support for maximum accuracy + smarter license detection that preserves original text even when <a href="https://mstdn.business/tags/SPDX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPDX</a> matching fails. Get the most accurate SBOMs possible! <a href="https://mstdn.business/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://anchore.com/blog/syft-1-20-faster-scans-smarter-license-detection-and-enhanced-bitnami-support/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://anchore.com/blog/syft-1-20-faster-scans-smarter-license-detection-and-enhanced-bitnami-support/</a>

pmonks (330ppm)<a href="https://social.coop/@sam" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@sam</a> I’m personally a fan of the <a href="https://sfba.social/tags/SPDX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPDX</a> approach - have a base license that can be modified “WITH” a “license exception”. In fact I’ve been casually on the hunt for a “no AI usage of any kind” license exception that I can add on to my (mostly MPL-2.0) licensed projects.

Orhun Parmaksız 👾Want to parse/validate open source licenses in Rust? 🦀 Check this out.🆔 **spdx**: Helper crate for SPDX expressions.📚 Docs: <a href="https://docs.rs/spdx" target="_blank" rel="nofollow noopener noreferrer" translate="no">https://docs.rs/spdx</a>⭐ GitHub: <a href="https://github.com/EmbarkStudios/spdx" target="_blank" rel="nofollow noopener noreferrer" translate="no">https://github.com/EmbarkStudios/spdx</a><a href="https://fosstodon.org/tags/rustlang" class="mention hashtag" rel="tag">#rustlang</a> <a href="https://fosstodon.org/tags/library" class="mention hashtag" rel="tag">#library</a> <a href="https://fosstodon.org/tags/spdx" class="mention hashtag" rel="tag">#spdx</a> <a href="https://fosstodon.org/tags/license" class="mention hashtag" rel="tag">#license</a> <a href="https://fosstodon.org/tags/parsing" class="mention hashtag" rel="tag">#parsing</a> <a href="https://fosstodon.org/tags/opensource" class="mention hashtag" rel="tag">#opensource</a> <a href="https://fosstodon.org/tags/validation" class="mention hashtag" rel="tag">#validation</a>

Veit SchieleI’ve just seen that pip now supports License-Expression in pip show: <a href="https://pip.pypa.io/en/stable/news/#features" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://pip.pypa.io/en/stable/news/#features</a> <a href="https://mastodon.social/tags/pip" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pip</a> <a href="https://mastodon.social/tags/spdx" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#spdx</a> <a href="https://mastodon.social/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python</a> <a href="https://mastodon.social/tags/Licensing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Licensing</a>

Miro Hrončok :fedora: :python:pip can now show SPDX license expressions 🎉 <a href="https://ichard26.github.io/blog/2025/01/whats-new-in-pip-25.0/#pep-639-spdx-license-expressions" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://ichard26.github.io/blog/2025/01/whats-new-in-pip-25.0/#pep-639-spdx-license-expressions</a><a href="https://floss.social/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python</a> <a href="https://floss.social/tags/SPDX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPDX</a>

Hugo van Kemenade🐍📦📜 All the pieces (that I use) are now in place for PEP 639 ("Improving License Clarity with Better Package Metadata")!I made sure to use latest Hatchling 1.27, added `license-files = [ "LICENSE" ]`, and deleted the deprecated licence Trove classifier.Thanks to contributors and maintainers of PyPI, packaging, Hatchling, Twine, PyPI publish GitHub Action, build-and-inspect-python-package and of course <a href="https://floss.social/@karo" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@karo</a> for the PEP+spec!<a href="https://discuss.python.org/t/pep-639-round-3-improving-license-clarity-with-better-package-metadata/53020/172" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://discuss.python.org/t/pep-639-round-3-improving-license-clarity-with-better-package-metadata/53020/172</a><a href="https://mastodon.social/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python</a> <a href="https://mastodon.social/tags/PEP639" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PEP639</a> <a href="https://mastodon.social/tags/PyPI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PyPI</a> <a href="https://mastodon.social/tags/SPDX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPDX</a> <a href="https://mastodon.social/tags/licensing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#licensing</a>

anchoreT-1 hour for our 2nd webinar in our <a href="https://mstdn.business/tags/SBOM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SBOM</a> series: Understanding SBOMs: Deep Dive with Kate Stewart. Join us to learn about <a href="https://mstdn.business/tags/SPDX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPDX</a> format, SBOMs for license compliance and how <a href="https://mstdn.business/tags/OSS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OSS</a> <a href="https://mstdn.business/tags/LLMs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LLMs</a> impact SBOM generation and analysis. Sign up <a href="https://get.anchore.com/deep-dive-with-kate-stewart/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://get.anchore.com/deep-dive-with-kate-stewart/</a>

anchoreTOMORROW 🚨 Join our live <a href="https://mstdn.business/tags/webinar" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#webinar</a> with Kate Stewart with crucial insights into <a href="https://mstdn.business/tags/SBOMs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SBOMs</a> and their evolving role in modern <a href="https://mstdn.business/tags/software" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#software</a> <a href="https://mstdn.business/tags/development" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#development</a>. Learn about <a href="https://mstdn.business/tags/SPDX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPDX</a> and so much more. Save your seat 👉 <a href="https://get.anchore.com/deep-dive-with-kate-stewart/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://get.anchore.com/deep-dive-with-kate-stewart/</a>

anchoreAfter our first webinar introduction on <a href="https://mstdn.business/tags/SBOM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SBOM</a> basics, we are continuing our educational series with a deeper dive "Understanding SBOMs: Deep Dive with Kate Stewart". Topics include: - History of SBOM and the development of <a href="https://mstdn.business/tags/SPDX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPDX</a> - Are SBOMs only for <a href="https://mstdn.business/tags/license" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#license</a> <a href="https://mstdn.business/tags/compliance" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#compliance</a>? - What role do SBOMs play when building systems with safety-critical considerations - How emerging tech like <a href="https://mstdn.business/tags/OSS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OSS</a> <a href="https://mstdn.business/tags/LLMs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LLMs</a> can impact SBOM generation and analysis?Register Now <a href="https://get.anchore.com/deep-dive-with-kate-stewart/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://get.anchore.com/deep-dive-with-kate-stewart/</a>

anchoreWEBINAR ALERT 🚨 We're excited to invite you to an exclusive <a href="https://mstdn.business/tags/SBOM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SBOM</a> <a href="https://mstdn.business/tags/webinar" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#webinar</a> featuring Kate Stewart, co-founder of <a href="https://mstdn.business/tags/SPDX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPDX</a> and a leading authority in <a href="https://mstdn.business/tags/software" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#software</a> <a href="https://mstdn.business/tags/supplychain" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#supplychain</a> <a href="https://mstdn.business/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a>. Save your seat 👉 <a href="https://get.anchore.com/deep-dive-with-kate-stewart/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://get.anchore.com/deep-dive-with-kate-stewart/</a>

anchoreKick off 2025 right! Join our weekly <a href="https://mstdn.business/tags/SBOM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SBOM</a> webinar series starting Jan 14. Learn from experts like Kate Stewart (<a href="https://mstdn.business/tags/SPDX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPDX</a>) & Steve Springett (<a href="https://mstdn.business/tags/CycloneDX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CycloneDX</a>) and master the art of securing your software supply chain. Read the blog post to get a sneak peek. ➡️ <a href="https://anchore.com/blog/all-things-sbom-in-2025-a-weekly-webinar-series/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://anchore.com/blog/all-things-sbom-in-2025-a-weekly-webinar-series/</a>

Miroslav SuchýDespite the Christmas break, Steve W. released a new <a href="https://rodina-sucha.cz/tags/SPDX" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SPDX</a> License List with 19 new licenses. Many of them were found during our work in <a href="https://rodina-sucha.cz/tags/Fedora" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Fedora</a>. <a href="https://github.com/spdx/license-list-XML/releases/tag/v3.26.0" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/spdx/license-list-XML/releases/tag/v3.26.0</a>

Recent searches

Search options

Administered by:

Server stats:

#spdx