blob: 2d63314013eb3e05862b71190db6bb6777c20bce [file]
<?php
/*******************************************************************************
* Copyright (C) Eclipse Foundation, Inc. and others.
*
* This program and the accompanying materials are made available under the
* terms of the Eclipse Public License v. 2.0 which is available at
* http://www.eclipse.org/legal/epl-2.0.
*
* SPDX-License-Identifier: EPL-2.0
*******************************************************************************/
require_once dirname ( __FILE__ ) . "/../classes/debug.php";
require_once ($_SERVER ['DOCUMENT_ROOT'] . "/eclipse.org-common/system/app.class.php");
require_once ($_SERVER ['DOCUMENT_ROOT'] . "/eclipse.org-common/system/nav.class.php");
require_once ($_SERVER ['DOCUMENT_ROOT'] . "/eclipse.org-common/system/menu.class.php");
$App = new App ();
$Nav = new Nav ();
$Menu = new Menu ();
$pageKeywords = "";
$pageTitle = "Eclipse Foundation Projects Calendar";
$pageAuthor = "Wayne Beaton";
include ($App->getProjectCommon ());
ob_start ();
?>
<link rel="stylesheet" href="/projects/handbook/resources/handbook.css" />
<div id="maincontent">
<h1><?php echo $pageTitle; ?></h1>
<p>
The Eclipse Foundation Projects Team schedules events to discuss the <a
href="../dev_process">Eclipse Foundation Development Process</a>, the
<a href="https://www.eclipse.org/org/documents/Eclipse_IP_Policy.pdf">Eclipse
Foundation Intellectual Property Policy</a> Policy and <a
href="https://www.eclipse.org/projects/handbook/#ip">Eclipse
Foundation Due Diligence Process</a>, and other related topics.
</p>
<p>
Upcoming events (all times are UTC) <a
href="https://calendar.google.com/calendar/ical/c_cfe894f8291f1dd1ee8214c5f7109af549ca7cd3e7df16f6ce69485aae97fced%40group.calendar.google.com/public/basic.ics">[iCal]</a>:
</p>
<iframe
src="https://calendar.google.com/calendar/embed?height=300&wkst=1&bgcolor=%23ffffff&ctz=Etc%2FGMT&mode=AGENDA&showNav=1&showTitle=0&showDate=1&showTabs=0&showPrint=0&showCalendars=0&src=Y19jZmU4OTRmODI5MWYxZGQxZWU4MjE0YzVmNzEwOWFmNTQ5Y2E3Y2QzZTdkZjE2ZjZjZTY5NDg1YWFlOTdmY2VkQGdyb3VwLmNhbGVuZGFyLmdvb2dsZS5jb20&color=%23B39DDB"
style="border: solid 1px #777" width="800" height="300"
frameborder="0" scrolling="no"></iframe>
<h2 id="office-hours">Office Hours Recordings</h2>
<p>The EMO hosts a monthly call to discuss the Eclipse Foundation
Development Process, changes to the Eclipse IP Policy and Due
Diligence Process, and other related topics. All Eclipse open source
project committers are invited to join. The format is flexible: we
generally start with a very short presentation followed by a question
and answer session. Bring your questions and the Eclipse Management
Organization team will try to provide answers.</p>
<p>We record only the formal presentation part of our "Office Hours"
sessions.</p>
<p>
We're tracking the evolution of this concept via <a
href="https://gitlab.eclipse.org/eclipsefdn/emo-team/emo/-/issues/402">EMO
Issue #402</a>. Post questions on that issue, or connect with the EMO
via email at <a href="mailto:emo@eclipse-foundation.org">emo@eclipse-foundation.org</a>.
<h3>Future Topics</h3>
<p>These are tentative topics for future sessions. We reserve the right
to change these plans.</p>
<div class="dlist">
<dl>
<dt>Eclipse Projects and SLSA</dt>
<dd>Supply Chain Levels for Software Artifacts (SLSA) is a security
framework that helps ensure the integrity of software artifacts.</dd>
</dl>
</div>
<h3 id="2023-11-09">
<a href="#2023-11-09">Intellectual Property Due Diligence</a>
</h3>
<p>Recorded on November 9, 2023</p>
<p>During this week's (online) office hours, we spent a few minutes
reminding committers of the services that we make available for
Eclipse committers to help reduce the burden of intellectual property
management. Specifically, we discussed the processes and tools that we
have in place to help with due diligence review of project code and
the third party content that leverage. Naturally, this discussion
covered some usage scenarios of the Eclipse Dash License Tool and
IPLab. We also spoke a little bit about SBOMs.</p>
<iframe width="560" height="315"
src="https://www.youtube.com/embed/pKGzgTflHYg?si=_rliUdi7aebHkCIe"
title="YouTube video player" frameborder="0"
allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share"
allowfullscreen></iframe>
<h4>Notes</h4>
<ul>
<li>Open Source distributions in a cloud-native world: from a technical to a
legal point of view<a
href="https://www.eclipsecon.org/2023/sessions/open-source-distributions-cloud-native-world-technical-legal-point-view">
[EclipseCon 2023]</a> <a href="https://www.youtube.com/watch?v=EVg9aP_toG4">[recording]</a></li>
<li><a href="https://github.com/eclipse/dash-licenses">The Eclipse
Dash License Tool</a></li>
<li><a href="https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab">Manually
create IP review requests via IPLab</a></li>
<li><a
href="https://gitlab.eclipse.org/eclipsefdn/emo-team/sbom/-/blob/main/docs/sbom.adoc">SBOM
Best Practices</a></li>
<li>Wayne is not a lawyer</li>
</ul>
<h3 id="2023-10-12">
<a href="#2023-10-12">SBOMs and Project Metadata</a>
</h3>
<p>Recorded on October 12, 2023</p>
<p>Generating SBOMs directly as part of your build, and (at least in
the case of Maven) sharing them to the software repository is
relatively straightforward. To really leverage the the tools to
generate SBOMs, however, we need your help to tighten up the metadata
captured in your build scripts (e.g., capture license information as
SPDX expressions in your pom.xml file) and update your builds to
generate the SBOMs.</p>
<iframe width="560" height="315"
src="https://www.youtube.com/embed/VeGfHzfdep4?si=AKOLkjIY7PCvX4eU"
title="YouTube video player" frameborder="0"
allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share"
allowfullscreen></iframe>
<h4>Notes</h4>
<ul>
<li><a
href="https://gitlab.eclipse.org/eclipsefdn/emo-team/sbom/-/blob/main/docs/sbom.adoc">SBOM
Best Practices</a></li>
</ul>
<h3 id="2023-09-14">
<a href="#2023-09-14">Eclipse Otterdog</a>
</h3>
<p>Recorded on September 14, 2023</p>
<p>Thomas Neidhart from the Eclipse Foundation's Security Team will
present Otterdog: a tool to manage GitHub organizations at scale using
a configuration as code approach.</p>
<iframe width="560" height="315"
src="https://www.youtube.com/embed/VnzF57EQaDI?si=hZYPAZHzAXoFDxkp"
title="YouTube video player" frameborder="0"
allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share"
allowfullscreen></iframe>
<h4>Notes:</h4>
<ul>
<li><a href="https://gitlab.eclipse.org/eclipsefdn/security/otterdog">Otterdog
on GitLab</li>
<li><a
href="https://gitlab.eclipse.org/eclipsefdn/helpdesk/-/issues/new">Request
assistance with Otterdog</a>
</ul>
<h3 id="2023-08-10">
<a href="#2023-08-10">2023 Committer Survey Hightlights</a>
</h3>
<p>Recorded on August 10, 2023</p>
<p>Maria Teresa provides an overview of what we learned from our recent
(2023) committer survey.</p>
<iframe width="560" height="315"
src="https://www.youtube.com/embed/G02xs9PiOBs"
title="YouTube video player" frameborder="0"
allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share"
allowfullscreen></iframe>
<h3 id="2023-06-08">
<a href="#2023-06-08">Progress Reviews</a>
</h3>
<p>Recorded on June 8, 2023</p>
<p>Progress reviews are a fundamental bit of governance that Eclipse
open source project teams engage in periodically (generally annually).
By engaging in a progress review, an open source project team can push
out official releases for a full year. For long-time Eclipse
Committers... progress reviews are fundamentally the same as release
reviews (the primary difference being that release reviews tend to be
aligned with a specific release). Note that specification projects are
required to engage in release reviews for every release.</p>
<p>The EMO doesn't tend to think of reviews as pass/fail events.
Rather, these reviews are an opportunity for the EMO and PMC to make
sure that Eclipse project teams understand their responsibilities
under the Eclipse Foundation Development Process and the Eclipse IP
Due Diligence Process, and are generally engaging in vendor neutral
open, transparent, and meritocratic practices to attract contribution
and participation.</p>
<iframe width="560" height="315"
src="https://www.youtube.com/embed/kytojCkw97A"
title="YouTube video player" frameborder="0"
allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share"
allowfullscreen></iframe>
<h4>Notes:</h4>
<p>
One thing that we forgot to mention in the talk is how to actually
initiate a progress review. To initiate a progress review, send a note
to <a href="mailto:emo@eclipse-foundation.org">EMO</a> and the team
will lead you through the process. Note that the EMO does periodically
initiate progress reviews on behalf of a project.
</p>
<ul>
<li><a
href="https://www.eclipse.org/projects/handbook/#progress-review">Progress
Reviews</a> in the Eclipse Foundation Project Handbook;</li>
<li><a href="https://www.eclipse.org/projects/tools/documentation.php">Documentation
Generator</a> (accessible by committers only);</li>
<li><a href="https://github.com/eclipse/dash-licenses">The Eclipse
Dash License Tool</a>;</li>
<li><a
href="https://gitlab.eclipse.org/eclipsefdn/emo-team/emo/-/issues/46">Generating
SBOM for Eclipse Projects</a></li>
</ul>
<h3 id="2023-05-11">
<a href="#2023-05-11">May 2023 Update</a>
</h3>
<p>Recorded on May 11, 2023</p>
<p>In ths session, we delivered status updates on various efforts that
we've been engaged in, including: progress reviews; the Eclipse Dash
License Tool; and generating SBOMs for Eclipse Projects.</p>
<iframe width="560" height="315"
src="https://www.youtube.com/embed/uTodfmOog70"
title="YouTube video player" frameborder="0"
allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share"
allowfullscreen></iframe>
<h4>Notes:</h4>
<ul>
<li><a
href="https://www.eclipse.org/projects/handbook/#progress-review">Progress
Reviews</a>;</li>
<li><a href="https://github.com/eclipse/dash-licenses">The Eclipse
Dash License Tool</a>;</li>
<li><a
href="https://gitlab.eclipse.org/eclipsefdn/emo-team/emo/-/issues/46">Generating
SBOM for Eclipse Projects</a></li>
</ul>
<h3 id="2023-04-24">
<a href="#2023-04-24">Someone Reports a Security Issue in my Project!
Now What?</a>
</h3>
<p>Recorded on April 24, 2023</p>
<p>
<em>Special Extra!</em> This session was recorded as part of the
Virtual Eclipse Community Meetups.
</p>
<p>All projects have bugs. Some of them have a security impact and can
be used to cause harm. We call them vulnerabilities. Because of the
possible impact of security issues, we handle them differently. This
talk will guide the audience through the Eclipse Foundation processes
of reporting and managing vulnerabilities with new tooling. As a
bonus, Marta will show resources for your project, like a SECURITY.md
template.</p>
<iframe width="560" height="315"
src="https://www.youtube.com/embed/SDm477kS_g0?si=9HFh5CnX15ufFjWL"
title="YouTube video player" frameborder="0"
allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share"
allowfullscreen></iframe>
<h4>Notes:</h4>
<ul>
<li><a href="https://www.eclipse.org/projects/handbook/#vulnerability">Managing
and Reporting Vulnerabilities</a></li>
</ul>
<h3 id="2023-04-13">
<a href="#2023-04-13">AI and Contribution</a>
</h3>
<p>Recorded on April 13, 2023</p>
<p>This presentation is intended to start a conversation about what our
policy/position should be with regard to how we deal with
contributions of content generated by an AI.</p>
<p>Note that our current policy is that we do not accept contributions
generated by an AI as doing so is--at least--in conflict with the
ECA/DCO (note that an AI cannot sign the ECA).</p>
<iframe width="560" height="315"
src="https://www.youtube.com/embed/NgeRDAuzVXw"
title="YouTube video player" frameborder="0"
allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share"
allowfullscreen></iframe>
<h3 id="2023-03-07">
<a href="#2023-03-07">SBOMs</a>
</h3>
<p>Recorded on March 7, 2023</p>
<p>A short discussion of some of the work that we're doing for Eclipse
projects regarding the generation of SBOMs and some of the
technologies that we're exploring to assist with their generation.</p>
<iframe width="560" height="315"
src="https://www.youtube.com/embed/iVOOcR1vHWo"
title="YouTube video player" frameborder="0"
allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share"
allowfullscreen></iframe>
<h3 id="2023-02-09">
<a href="#2023-02-09">Security @ The Eclipse Foundation</a>
</h3>
<p>Recorded on February 9, 2023</p>
<iframe width="560" height="315"
src="https://www.youtube.com/embed/6Udk9aK4nDc"
title="YouTube video player" frameborder="0"
allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share"
allowfullscreen></iframe>
<h3 id="2023-01-13">
<a href="#2023-01-13">The Eclipse Dash License Tool</a>
</h3>
<p>Recorded on January 13, 2023</p>
<iframe width="560" height="315"
src="https://www.youtube.com/embed/xDodKRtkNVw"
title="YouTube video player" frameborder="0"
allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share"
allowfullscreen></iframe>
<h4>Notes:</h4>
<ul>
<li><a href="https://github.com/eclipse/dash-licenses">The Eclipse
Dash License Tool on GitHub</a></li>
<li><a
href="https://www.eclipse.org/projects/handbook/#ip-license-tool">Eclipse
Dash License Tool in the Handbook</a></li>
<li><a href="https://gitlab.eclipse.org/eclipsefdn/emo-team/iplab">IP
Lab on Eclipse GitLab</a></li>
</ul>
<h3 id="2022-12-08">
<a href="#2022-12-08">Eclipse Foundation Intellectual Property Policy
Updates</a>
</h3>
<p>Recorded on December 8, 2022</p>
<iframe width="560" height="315"
src="https://www.youtube.com/embed/O0n9aExZ1n0"
title="YouTube video player" frameborder="0"
allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture"
allowfullscreen></iframe>
</div>
<?php
$html = ob_get_contents ();
ob_end_clean ();
$App->generatePage ( $Theme, $Menu, $Nav, $pageAuthor, $pageKeywords, $pageTitle, $html );
?>