2025-2-4-OSPO-EG

Date/Time

Feb. 4, 2025, 1:00pm (UTC) / 10:00pm(JST) via Zoom

Attendees

• Masato Endo (Toyota)

• Masanori Itoh (Toyota)

• Ryunosuke Yamashita (Toyota)

• Hiroyuki Ishii (Panasonic)

• Takashi Ninjouji (Honda)

• Masaaki Miyashita (Nissan)

• Naoto Yamaguchi (Aisin)

• Junya Nakamura (Aisin)

• Nonuyuki Yamada (Aisin)

• Keiya Nobuta (Fujistsu)

• Marius Vlad (Collabora)

• Walt Miner (Linux Foundation)

• Jan-Simon Moller (Linux Foundation)

Discussion Materials

Agenda/Minutes

Key Discussion Points:

1. Special Event Planning:

   • Discussion on the logistics and scheduling of a special OSPO on Wednesday night of the AMM.

   • The event will be listed as an "Ospo Special Event" on the schedule, with flexibility for internal agenda adjustments.

2. Executive Presentation Deck:

   • Masanori Itoh shared updates on the executive presentation deck, including improvements based on feedback.

   • Automotive industry-specific examples, case studies, and survey data were added to make the content more relevant.

   • Suggestions were made to include examples from various companies (e.g., Toyota, Honda) to enhance the presentation's appeal.

   • Deck will be reviewed prior to the AMM by the EG.

3. Documentation and Review Process:

   • The team discussed the process for reviewing and managing documentation, including the use of tools like Confluence, Google Drive, GitHub, or Groups.io.

   • Challenges with company restrictions on Google Drive access were noted.

   • Alternatives like using the AGL Confluence platform or GitHub for version control and collaborative editing were considered.

4. SBoM (Software Bill of Materials) Discussion:

   • Collaboration with OpenChain on automotive-specific SBoM use cases and issues was highlighted as a priority.

   • The need to align with SPDX (Software Package Data Exchange) standards, including potential support for SPDX 3.0, was discussed. This point was discussed at FOSDAM too.

   • A comparison of current Yocto project outputs with SPDX 3.0 capabilities will be explored.

5. Future Activities and Support Programs:

   • A potential "Ospo Loan Support Program" was proposed to assist companies in setting up their Open Source Program Offices (Ospo).

   • The idea will be further discussed and refined based on member feedback.

6. Face-to-Face Workshop:

   • A face-to-face workshop is scheduled for February 28, with discussions on topics like SBoM and other key initiatives.

   • The workshop will provide an opportunity for more detailed discussions and collaborative planning.

7. Next Steps:

   • Internal review of the executive presentation deck will begin on February 5, with a target release in March.

   • Members will explore tools and platforms for managing documentation collaboratively.

   • Further discussions on SBoM and SPDX standards will continue during the face-to-face workshop.

8. FYI: Useful Links

   1. TODO Group: Why Open Source matters to your enterprise

      1. https://www.linuxfoundation.org/resources/publications/todo-group-why-open-source-matters-to-your-enterprise

      2. [ja] https://www.linuxfoundation.jp/blog/2020/09/why-open-source-matters-to-your-enterprise/

   2. A Deep Dive into Open Source Program Offices: Structure, Roles, Responsibilities, and Challenges

      1. https://www.linuxfoundation.org/research/a-deep-dive-into-open-source-program-offices

      2. [ja] https://www.linuxfoundation.jp/publications/2022/11/a-deep-dive-into-open-source-program-offices/

   3. The Evolution of the Open Source Program Office (OSPO)

      1. https://www.linuxfoundation.org/research/the-evolution-of-the-open-source-program-office-ospo

      2. [ja] https://www.linuxfoundation.jp/resources/publications/the-evolution-of-the-open-source-program-office-ospo/

   4. TODO Group - Guides and Resources - OSPO Guides

      1. https://todogroup.org/resources/guides/

   5. OSPO MindMap by todogroup

      1. https://ospomindmap.todogroup.org/

   6. Open Source Guide (GitHub)

      1. https://opensource.guide/

      2. https://github.com/github/opensource.guide

   7. Open Source Compliance in the Enterprise

      1. Open Source Compliance in the Enterprise

Action Items:

• Masanori Itoh:

  • Share the updated executive presentation deck on Confluence for review.

  • Compile feedback from members and incorporate it into the final version.

• Hiroyuki Ishii:

  • Discuss internally the feasibility of using Google Drive, Confluence, or GitHub for documentation management.

• Naoto Yamaguchi:

  • Confirm company restrictions on accessing Google Drive for collaborative editing.

• Jan-Simon Möller:

  • Run a comparison of Yocto project outputs with SPDX 3.0 to assess gaps and improvements.

• Takashi Ninjouji:

  • Share insights from OpenChain's use of Google Drive for collaborative editing.

• All Members:

  • Provide feedback on the executive presentation deck and participate in the internal review process.

  • Prepare for discussions on SBoM and other topics during the face-to-face workshop.Discussion on the schedule of “AGL OSPO Special Event“ at next AMM

Next Meeting

• Feb. 18, 2025, 1:00pm (UTC) / 10:00pm(JST) via Zoom