SDLC Framework WG Bi-weekly call - January 5th

[aaronsearle]

Date

Monday January 5th- 1000 EST / 1500UK

Untracked attendees

Name	Firm	Comment

Meeting notices

• FINOS Project leads are responsible for observing the FINOS guidelines for running project meetings. Project maintainers can find additional resources in the FINOS Maintainers Cheatsheet.

• All participants in FINOS project meetings are subject to the LF Antitrust Policy, the FINOS Community Code of Conduct and all other FINOS policies.

• FINOS meetings involve participation by industry competitors, and it is the intention of FINOS and the Linux Foundation to conduct all of its activities in accordance with applicable antitrust and competition laws. It is therefore extremely important that attendees adhere to meeting agendas, and be aware of, and not participate in, any activities that are prohibited under applicable US state, federal or foreign antitrust and competition laws. Please contact legal@finos.org with any questions.

• FINOS project meetings may be recorded for use solely by the FINOS team for administration purposes. In very limited instances, and with explicit approval, recordings may be made more widely available.

Agenda

• Convene, roll call, welcome new people
• Approve previous meeting minutes: SDLC Framework WG Bi-weekly call - December 8th #282
• Upcoming Finos Toronto
• Control Lifecycle document review within Finos
• New Maintainers
• (Fidelity) Proposal: Additional Maintainers (Fidelity) finos-labs/SDLC-Controls-Framework#24
• (UBS) Proposal: Additional Maintainers (UBS) finos-labs/SDLC-Controls-Framework#23
• AOB, Q&A & Adjourn (5mins)

Decisions Made

• Decision that George will submit a Toronto Finos presentation.
• Aaron to try and find a co-presenter from a
• The correct names were identified for UBS
• Fidelity we should check before reaching out to ensure we have the same names.

Action Items

• Common controls document for review shared around pending review.
• Do we also want to do a Toronto workshop?
• Schedule longer workshop session for February over email
• Aaron to follow up with maintainers for approval of the maintainer list.
• New maintainers to obtain/share their Github IDs for inclusion into the ACL.

Meeting Notes

Discussed doing in person or remote workshops as a potential solution to increasing the pace/rate of change, in addition to expanding the maintainer scope.
A discussion on the upcoming Toronto finos conference in April, potentially repeating the NY material to drive more interest.

A side discussion on the role of AI as a reviewer and the inclusion of language to specify whether a machine/AI can be a valid reviewer but contingent on a human being in the loop elsewhere in the pipeline, this is worth remembering when we define the controls.

Discussed the controls definition document shared around for review for feedback (sadly there wasn't any at this time).

Zoom info

(https://zoom-lfx.platform.linuxfoundation.org/meeting/96292319760?password=a023f03e-c2aa-46fb-aae3-5d93c9d9664e)

Github Repo: https://github.com/finos-labs/SDLC-Controls-Framework/

Project Board: SDLC Project Board

Mailing List: Email sdlc-framework+subscribe@lists.finos.org to subscribe to our mailing list

[carmithersh]

Carmit Hershman / JFrog

[joshbressers]

Josh Bressers / Anchore

[jorok]

George Kichukov / GitLab

[karlmoll]

Karl Moll / FINOS

[aaronsearle]

Aaron Searle / Morganstanley

[migmartri]

Miguel Martinez / @chainloop-dev

[karlmoll]

FINOS/DTCC AI Powered Hackathon

https://communications.dtcc.com/dtcc-hackathon-registration-18146.html

[cavanap]

Paul Cavanagh /Adaptavist
and the underlying link to the email mailing list resource needs to be corrected to sdlc-framework+subscribe@lists.finos.org