Re: [sdv-wg] Safety Relevance Metadata for Automotive / Functional-Safet

[Sara Gallian <sara.gallian@xxxxxxxxxxxxxxxxxxxxxx>]

Dear Devashri,

Thanks for reaching out. Safety is a topic several projects engage with in the Eclipse SDV initiative, particularly Eclipse TSF (a methodology for assessing risk in automotive), Eclipse S-CORE, Eclipse Ankaios, Eclipse uProtocol and others. 

@Krippner Daniel (ETAS-VCS/ETH) has worked with GitHub Actions and metadata for safety artifacts in the context of Eclipse uProtocol. 

My suggestion is to engage with the Technical Advisory Committee, @Peter LeVasseur  is the Chair, and introduce your proposal as a first step. They'll be able to guide you towards the next step. 

In addition, @Dana Vede is part of the Eclipse Foundation staff, and she is our Process Engineer. 

Best,

Sara 

On Fri, Sep 4, 2026 at 8:03 PM Devashri Datta via sdv-wg <sdv-wg@xxxxxxxxxxx> wrote:

Hello Eclipse SDV community,

I recently saw the Eclipse Technical Advisory Council discussion noting an open question around how Eclipse can integrate Safety Relevance Metadata into automotive and functional-safety SBOMs.

I have been working on this exact topic through SRAP/SRIL safety relevance metadata work, including related public discussions and proposals across OpenChain Automotive, SPDX, CycloneDX, and OpenSSF SBOM communities.

I also sent a short note to the Eclipse EMO / Security Team, but wanted to raise this here as well because Eclipse SDV seems like the most relevant community context.

Would there be interest in a concise public proposal or discussion note on how Safety Relevance Metadata could be represented in functional-safety SBOM guidance for Eclipse SDV projects?

Relevant public references:

• OpenChain Automotive discussion: https://github.com/OpenChain-Project/Automotive-Open-Source-Governance-Monthly/discussions/2
• CycloneDX safety relevance proposal: https://github.com/CycloneDX/specification/issues/954
• SPDX safety/risk annotation feedback: https://github.com/spdx/spdx-spec/issues/1354
• SPDX 3.1-dev SafetyContextRelationship: https://spdx.github.io/spdx-spec/v3.1-dev/model/FunctionalSafety/Classes/SafetyContextRelationship/

I would be happy to contribute a short draft, example metadata fields, or an issue/PR if there is a preferred Eclipse SDV repository or guidance area.

Regards,
Devashri Datta

_______________________________________________
sdv-wg mailing list
sdv-wg@xxxxxxxxxxx
To unsubscribe from this list, visit https://accounts.eclipse.org

--

Dr Ing Sara Gallian

Senior Manager, SDV & Automotive Programs | Eclipse Foundation Europe GmbH

eclipse.org | Twitter | LinkedIn | YouTube 

Eclipse Foundation: The Community for Open Innovation and Collaboration