Automation WG Git Pilot

["Coffin, Chris" <ccoffin@mitre.org>]

All,

 

The Automation WG met on August 7 and discussed the current state of the Git pilot used by a handful of CNAs to share CVE details with the primary CNA (i.e., MITRE). The Git pilot was established with a limited timeframe that is due to end on August 21. All feedback received so far suggests that the pilot has been successful and that Git is very useful as a means for sharing CVE details. However, there is general consensus that more functionality should be implemented and more things need to be test before ending this pilot program. In other words, only the first phase of this pilot program has been completed.

 

MITRE suggests that the Git pilot be temporarily extended until such time that the WG defines a plan for the next phase. The next Automation WG meeting will include this agenda topic and will drive towards having a plan. MITRE or the Automation WG will report back by August 25 with the status of this plan.

 

Does the Board agree with this approach? Additionally, Do any Board members have any suggestions or thoughts on what the next phase plan should include?

 

Thanks,

 

Chris