Skip to content

SDLC Framework WG Bi-weekly call - June 8th 2026 #300

Description

@aaronsearle

Date

8th June 2026 - 10am EST / 3pm UK

Untracked attendees

Name Firm Comment

Meeting notices

  • FINOS Project leads are responsible for observing the FINOS guidelines for running project meetings. Project maintainers can find additional resources in the FINOS Maintainers Cheatsheet.

  • All participants in FINOS project meetings are subject to the LF Antitrust Policy, the FINOS Community Code of Conduct and all other FINOS policies.

  • FINOS meetings involve participation by industry competitors, and it is the intention of FINOS and the Linux Foundation to conduct all of its activities in accordance with applicable antitrust and competition laws. It is therefore extremely important that attendees adhere to meeting agendas, and be aware of, and not participate in, any activities that are prohibited under applicable US state, federal or foreign antitrust and competition laws. Please contact legal@finos.org with any questions.

  • FINOS project meetings may be recorded for use solely by the FINOS team for administration purposes. In very limited instances, and with explicit approval, recordings may be made more widely available.

Agenda

  • Convene, roll call, welcome new people
  • Approve previous meeting minutes
  • Roundtable discussion on project status
  • Contribution Processes
  • Control review
  • OSFF London Discussion
  • AOB, Q&A & Adjourn (5mins)

Notes

  • OSFF: London Reminder, it is coming up, book your tickets!
    • Workshop on the 24th
  • Discussed Project Future and roadmap to becoming a "project". Karl looking to set up a meeting to discuss further and showcase our progress.
  • Discussed PRs raised with new additions
    • Agreed to merge and get them into the draft we have
  • Potential for sync up with the http://cyberriskinstitute.org/
  • as well as the Luxembourg house of cyber security

Follow Ups

  • Merge outstanding pull requests
  • Include control "placement"/"phase". e.g mi-18. To the site
  • Control gap to be added for code review
  • "Type" field doesn't appear to reflect in the search correctly, some are missing
  • Separate control for infrastructure inventory
  • Review of mitigations missing risks today, propose gaps to be closed
  • Requirements control needs to be finished and to be linked appropriately to a risk
  • Mail German the slides/introduction to SDLCCC
  • ...

Zoom info

Join Zoom Meeting

Github Repo: https://github.com/finos/devops-automation/

Project Board: https://github.com/orgs/finos/projects/33

Mailing List: Email devops-mutualization+subscribe@finos.org to subscribe to our mailing list

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions