Attendees:
Joakim Bech (Linaro) Dan Handley (Arm) Eric Finco (ST) Abhishek Pandit (Arm) David Brown (Linaro) Ashutosh Singh (Arm) Kevin Townsend (Linaro) Andrej Butok (NXP) Dave Cocca (Renesas) KangKang Shen (FutureWei) Julius Werner(Google) Lionel Debieve (ST)
ACTION: AP to propose specific website updates to TSC that incorporates inclusive language text. ACTION: All to review Joakim's security incident flow diagrams ACTION: Dan to ask Don about opening up community project items in Phabricator
Minutes:
AP: Light agenda today. Just an update on previous approvals.
AP: Trusted Services project is approved by TSC. There are some pending Arm internal approvals that have nearly completed. Expect to push first patches in the coming week.
AP: Inclusive language proposal is approved by TSC. AP: Propose to have code of conduct page on website. Could be based on another org's policy. Zephyr looks a good candidate. AP: Also want to provide a short info about the organization structure on the main website AP: Inclusive language draft can then be incorporated into those pages. ACTION: AP to propose specific website updates to TSC that incorporates inclusive language text. AP: Expectation then will be that project leads will add the text to their own project specific documentation (e.g. coding guidelines).
AP: AOB?
KKS: Was looking for public meeting link for tech forums. Couldn't find them. AP: We can move the links somewhere more obvious if you want? KKS: Actually the link in "News & Blogs" is good enough. Just need to get used to the new site. https://www.trustedfirmware.org/meetings/
JB: We purchased GP test suite a while ago. Since about 3 weeks ago this is now integrated into OP-TEE CI system. https://optee.readthedocs.io/en/latest/building/gits/optee_test.html#extende...
JB: Have been trying to supplement security incident process with diagrams. Have had early feedback from some (e.g. DH). Now would like to share with TSC for feedback. https://people.linaro.org/~joakim.bech/tf/ JB: Think this is necessary as the text is quite complex. https://developer.trustedfirmware.org/w/collaboration/security_center/report... DH: Agree. Really useful to show default flow in 1st diagram. Text is complicated due to lots of potential caveats. Each project could show their own specific flow if needed. DH: Diagrams 2-3 are more linked to the process for security team members so could be added there https://developer.trustedfirmware.org/w/collaboration/security_center/setup_... AP: Could also write a blog that uses these diagrams and explains the caveats in more detail. DH/JB: Might need to look at colour scheme before integrating to website ACTION: All to review Joakim's security incident flow diagrams
AP: 2 other in-progress items: Migration to groups.io and prototyping GitHub/Gerrit integration. Was hoping for update from Don on that. DH: This and other board/TSC items are captured in Phabricator but visibility is limited at present. We should get those opened up, at least for all board/TSC members ACTION: Dan to ask Don about opening up community project items in Phabricator