Contributions and benefits from SPDX

[m-linner-ericsson]

From SPDX:

The Software Package Data Exchange (SPDX®) specification is a standard format for communicating the component and metadata information associated with software packages.

SPDX is now an ISO standard and touches our discussions around artifacts. During SIG interoperability April 15th meeting we were informed that for version 3 they will look into CI/CD information see Slides from Kate page 43.

• Could we benefit from SPDX by using their terminology or concepts?
• How could we contribute to SPDXs 3.0 development in the CI/CD space?

[m-linner-ericsson]

From SIG-Interoperability discussion Kate has started a google doc on fields that would be good in a build profile https://docs.google.com/document/d/1BYSw2bbCsLvt4nsMt3AHpF_H36dRFLJwQb3d93P1xNE/edit