Fam – Below details the steps that will be taken this year to elect the 2023-2024 TAC for the OpenSSF.  Anyone interested in participating, details to register to vote, details about the TAC self-nomination process, and details about the SCIR (community security representative for the foundation) are listed below.

I strongly encourage everyone to take the minute or so to register to vote once the self-nominations are complete.  You’ll need your GH id.  For anyone interested in putting themselves forth to be a candidate for the TAC, the process is also discussed below.  If anyone has questions about that, feel free to reach out to me, and I can share what my last year on the TAC has entailed.

Voter Eligibility (Electorate) Self-Nomination Process

Any contributor to OpenSSF working groups or initiatives is eligible to participate in the election. Valid contributions include: commits or submitted pull requests via Github; public edits or comments on Google docs or other work products associated with OpenSSF; posting messages to any mailing list or on Slack; and beyond that any other form of positive engagement with OpenSSF activities. The form asks you for an example of your contributions; this is merely to make it easier for election observers and OpenSSF staff to validate. If you have in any way been involved in or care about OpenSSF, but are in doubt as to whether your contribution “counts”, please fill it out anyways, and we will follow up.

Deadline: March 12, 2023

Voter Eligibility Self-Nomination Form

TAC Self-Nomination Process

The OpenSSF Technical Advisory Council (TAC) is composed of seven total individuals, four of whom are elected annually. If you are interested in serving on the TAC, and qualify as an eligible voter as above, please complete the self-nomination form below,

Deadline: March 12, 2023

TAC Candidate Self-Nomination Form

SCIR Self-Nomination Information and Process

Since early in its existence, the OpenSSF Governing Board has sought to ensure it gets adequate input from voices in the software security community who would otherwise not be at the table. We seek candidates for the Security Community Individual Representative (SCIR) who can represent those voices, while also being a subject matter expert in the field with their own set of perspectives. Familiarity with the different OpenSSF working groups and projects, and being able to dedicate the time to be sufficiently informed on the issues that arise in our monthly calls and ongoing discussions, is highly desired. It is also highly desired, but not required, that the SCIR be a contributor and thus eligible to vote in the election. 

Deadline: March 12, 2022

SCIR Candidate Self-Nomination Form

2023 Election Process

The Election Process will be monitored by Election Officials (volunteers identified by the TAC). At the conclusion of the validation period, Election Officials will publish the complete list of candidates.

• Begin of overall election process: February 27
• TAC Self-Nomination Period: February 27 - March 12 (2 weeks)
• SCIR Self-Nomination Period: February 27 - March 12 (2 weeks)
• Voter Ballot Request Period: February 27 - March 12 (2 weeks)
• Validation Period: March 13 - March 19 (1 week)
• Nominees Announced: March 20
• Voting Period: March 20 - April 2 (2 weeks)
• Announcement of election results: April 3

The election will be conducted using the electronic voting tool, Opavote. A Single Transferable Voting method will be used for the TAC as there are multiple candidates. 

Following the validation period, the Election Officials will review the pool of eligible voters to confirm eligibility to participate in the election, per the guidelines set forth by the TAC. Eligible voters will receive an invitation to access their ballot from Opavote. The ballot will include the option to vote for both the TAC and SCIR. 

Questions related to the nomination and/or election process should be directed to operations@.... 

Links: 

• TAC Meeting Notes
• GitHub OSSF/tac

Cheers,

CRob

Director of Security Communications

Intel Product Assurance and Security

Hello all.  Christine and Jay will be leading calls focused on the DEI activities within the EDU.SIG Plan(1) starting 17Jan2023.  A calendar invite can be found on the OSSF’s Community Calendar(2).

When – Every other Tuesday at 11am-12pm EST starting 17 jan2023

Where – https://zoom.us/j/91587450609

What – https://www.google.com/url?q=https://docs.google.com/document/d/1LdQ07veOcJ596Vo3aQZCFy-HHeEO7cHnbE_6u_uq9Fk/&sa=D&source=calendar&usd=2&usg=AOvVaw2M7Rt7w-7-YuDqfIFc8iMX

Repo - https://github.com/ossf/education/

Chat - https://openssf.slack.com/archives/C04FMD5HSC9

Cheers,

CRob

Director of Security Communications

Intel Product Assurance and Security

Hey Operations!  With the EDU.SIG and OSS-SIRT.SIGs sharing their “final” draft plans with the TAC to address Streams 1 and 5 of the OSSF Mobilization plan, we no longer need the subsection calls until the TAC/GB determines what, if anything, will happen to move forward.  Please cancel the OSS-SIRT SIG Section 1-3 calls and the EDU.SIG Sections 1-3 calls, but KEEP the full SIG calls (Tuesdays & Wednesdays bi-weekly).  Thanks!

Cheers,

CRob

Director of Security Communications

Intel Product Assurance and Security

Hello all – The DEI subcommittee would LOVE your opinion on a bi-weekly meeting time that works out for the majority of folks who would like to join us in our focused efforts to move forward to addressing historically underserved communities with our educational efforts.  Please pick a time from the choices on this doodle(1) by FRIDAY JAN 6, 2023 so we can accommodate the majority of folks desiring to participate. We’ll then get an official meeting invite & assorted zoom details sent out to everyone afterward.  A copy of our first call’s meeting notes can be found here(2).  We’re looking forward to working with everyone as this effort progresses.

1. - https://doodle.com/meeting/organize/id/eXL1rA8e
2. - https://docs.google.com/document/d/1LdQ07veOcJ596Vo3aQZCFy-HHeEO7cHnbE_6u_uq9Fk/edit#

Cheers,

CRob

Director of Security Communications

Intel Product Assurance and Security

Friends – Sorry for the short notice and lack of an actual calendar invite. 

Our best time seems to be 11am EST (~30min from now) for the responders.  If you are available, please join us on Zoom(1) to help us begin planning our efforts for the OSSF EDU.SIG DEI Subcommittee.

1. - https://zoom.us/j/94192055959?pwd=dmtmbDFxaUg1eWVqZDJNUzFnZ0UrUT09

Cheers,

CRob

Director of Security Communications

Intel Product Assurance and Security

Hi

Happy to see this get started. A quick clarification, Jay White and I will be co-chairs.

Thanks

Christine

EXTERNAL MAIL: bounce+112097+1+6791241+11891681@...

Team – we’ve had numerous members express interest in devoting time to collaborating specifically on our Diversity, Equity, and Inclusion goals for the SIG.  If you wish to join in the conversation and help us further these important components of our plan, please join us on Slack(1), our mailing list(2), and sign up to join the kick-off call chaired by our very own Christine(3)!  We’d LOVE to get this group kickstarted before the end of 2022 so we can hit the ground running on achieving our goals early in 2023!  Thanks for your consideration and support!

1. - https://openssf.slack.com/archives/C04FMD5HSC9
2. - https://lists.openssf.org/g/openssf-sig-education-dei
3. - https://doodle.com/meeting/organize/id/aQn41rLb

Cheers,

CRob

Director of Security Communications

Intel Product Assurance and Security

Team – we’ve had numerous members express interest in devoting time to collaborating specifically on our Diversity, Equity, and Inclusion goals for the SIG.  If you wish to join in the conversation and help us further these important components of our plan, please join us on Slack(1), our mailing list(2), and sign up to join the kick-off call chaired by our very own Christine(3)!  We’d LOVE to get this group kickstarted before the end of 2022 so we can hit the ground running on achieving our goals early in 2023!  Thanks for your consideration and support!

1. - https://openssf.slack.com/archives/C04FMD5HSC9
2. - https://lists.openssf.org/g/openssf-sig-education-dei
3. - https://doodle.com/meeting/organize/id/aQn41rLb

Cheers,

CRob

Director of Security Communications

Intel Product Assurance and Security

EDU.SIG & BEST WG members – the EDU.SIG has completed our work on the next draft of the Education plan that we desire to share with the TAC in early 2023.  Please take some time and read through the plan(1) and provide any feedback you may have(2).  If you have corrections or desired changes to the wording, please submit a PR.  We’d like to have this feedback no later than 23Dec2022 so that we can begin the process of sharing with the TAC and GB.  Thanks to everyone that helped us get this far, great work!  I’m really looking forward to collaborating on the next stages of our efforts here!

1. - https://github.com/ossf/education/tree/main/plan
2. - https://github.com/ossf/education/issues/64

Cheers,

CRob

Director of Security Communications

Intel Product Assurance and Security

EDU.SIG - as we near completion of the revised plan, I invite EVERYONE to give it a last read/re-read to ensure it makes sense and we're not missing any obvious gaps.  As each section wraps up I'll be ensuring the formatting/wording is consistent as well as collecting all resource needs into a summary page.  I'll send an official RFC out once that happens, but we'd love to get any gaps or questions addressed ASAP - https://github.com/ossf/education/tree/main/plan

Cheers,

CRob

Director of Security Communications

Intel Product Assurance and Security