Re: [SCITT] CISA: Repository for Software Attestations and Artifacts (RSAA)

[Alexander Stein <[e-mail]>]

On 4/5/24 6:37 PM, Steve Lasker wrote:
>
> Good timing, Ray,
>
> A.J. was going to facilitate the SCITT Community Meeting next week, 
> and the Software Attestations was his first topic.
>
> Reminder: Community meetings restart on April 8th 4 PM UTC (groups.io) 
> <https://groups.io/g/scitt-community/message/73>
>
> --> Does this actually do anything to improve software by having 
> producers say they do everything right?
>
Steve speaks the truth. Just a reminder: the SCITT Community group site, 
content, and meetings are necessarily related to the IETF specs, but 
where I intended (for a while) to discuss SCITT implementations and 
related technology. I hope others, not just me, can discuss their 
answers to this question, and perspectives to all kinds of related 
questions. They are very much outside the scope of the Architecture and 
SCRAPI docs though, hence I try to keep it separate.

So on that note, happy to see compare and contrast points about the spec 
here, but for all other details less interesting to IETF spec authors, 
see you over there in the mailing list, meeting info, and community 
repos linked above. :-)