Skip to content
/ spec Public

A draft standard for communicating a cryptographic record of build inputs for software artifacts.

License

Notifications You must be signed in to change notification settings

omnibor/spec

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

90 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

OmniBOR Specification

This repository contains the OmniBOR specification, which is the formal definition of the OmniBOR standard, intended to enable the consistent, reproducible recording of inputs to builds which produce software artifacts.

Format

This standard is intended to be written according to the guidance from the International Organization for Standardization (ISO) for writing standards. ISO's guide to writing standards is available to review, as is a model manuscript of a draft ISO standard ("The Rice Model").

Contributing

Work on the OmniBOR specification is overseen by the OmniBOR Working Group. If you are interested in contributing to OmniBOR, we recommend the following:

  • Opening an Issue or a Discussion to share your perspective on a proposed change, or an issue you've identified in the specification.
  • Participating in discussion with respondents to the issue.
  • Joining in on the weekly OmniBOR Working Group meetings, where open issues for the specification can be discussed.

Code of Conduct

All participants in the OmniBOR project, including anyone communicating in the OmniBOR Issue Tracker or Discussions, in the OmniBOR Slack channel, participating in an OmniBOR Working Group meeting, or contributing to any OmniBOR repository, must abide by the requirements of the project's Code of Conduct.

Licensing

This specification and the broader contents of this repository are subject to the Community Specification License 1.0. The full contents of the license may be found in the license file in this repository. This license also includes a description of the licensing agreed to by contributors to the project.

About

A draft standard for communicating a cryptographic record of build inputs for software artifacts.

Topics

Resources

License

Code of conduct

Stars

Watchers

Forks