Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

define supply chain, artifact #67

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

define supply chain, artifact #67

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions FAQ/artifact.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
## **Q: How does OSIM define "artifact"?**
**A:**
In the context of OSIM, an "artifact" is defined as a physical or virtual item that is moving between entities along a
[supply chain](./supplychain.md).
6 changes: 6 additions & 0 deletions FAQ/supplychain.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
## **Q: How does OSIM define "supply chain"?**
**A:**
In the context of OSIM, a supply chain is the network of all the individuals, organizations, resources, activities and technology involved in the creation, sale and delivery of an artifact to the end user.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

How about "that work together to build, deliver, and operate software" instead of "involved in the creation, sale and delivery of an artifact"? I'm hesitant about "sale" and in some cases one supply chain may be a sub-part of another, in which case the smaller one may not actually involve end users.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What about "that work together to build, offer, deliver, and operate software".
The offer could be an open source grant of license or the sale in commercial and mean enough in free and open source context.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In the context of OSIM, a supply chain is the network of all the individuals, organizations, resources, activities and technology involved in the creation, packaging, offer, license, delivery, operation, and subsequent lifecycle of an artifact.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

and make consistent with OSIM charter

The supply chain may involve both physical and virtual [artifacts](./artifact.md).
In the case of physical artifacts, the supply chain begins with raw materials and ends with the "finished product" artifact delivered to end users.
In the case of virtual artifacts, the supply chain is the combination of people, processes, systems, software, and data that are involved in the development, deployment, and maintenance of the artifact.