| Re: [sdv-wg] Safety Relevance Metadata for Automotive / Functional-Safety SBOMs |
Dear Devashri,Thanks for reaching out. Safety is a topic several projects engage with in the Eclipse SDV initiative, particularly Eclipse TSF (a methodology for assessing risk in automotive), Eclipse S-CORE, Eclipse Ankaios, Eclipse uProtocol and others.@Krippner Daniel (ETAS-VCS/ETH) has worked with GitHub Actions and metadata for safety artifacts in the context of Eclipse uProtocol.My suggestion is to engage with the Technical Advisory Committee, @Peter LeVasseur is the Chair, and introduce your proposal as a first step. They'll be able to guide you towards the next step.In addition, @Dana Vede is part of the Eclipse Foundation staff, and she is our Process Engineer.Best,SaraOn Fri, Sep 4, 2026 at 8:03 PM Devashri Datta via sdv-wg <sdv-wg@xxxxxxxxxxx> wrote:______________________________Hello Eclipse SDV community,
I recently saw the Eclipse Technical Advisory Council discussion noting an open question around how Eclipse can integrate Safety Relevance Metadata into automotive and functional-safety SBOMs.
I have been working on this exact topic through SRAP/SRIL safety relevance metadata work, including related public discussions and proposals across OpenChain Automotive, SPDX, CycloneDX, and OpenSSF SBOM communities.
I also sent a short note to the Eclipse EMO / Security Team, but wanted to raise this here as well because Eclipse SDV seems like the most relevant community context.
Would there be interest in a concise public proposal or discussion note on how Safety Relevance Metadata could be represented in functional-safety SBOM guidance for Eclipse SDV projects?
Relevant public references:
- OpenChain Automotive discussion: https://github.com/OpenChain-
Project/Automotive-Open- Source-Governance-Monthly/ discussions/2 - CycloneDX safety relevance proposal: https://github.com/CycloneDX/
specification/issues/954 - SPDX safety/risk annotation feedback: https://github.com/spdx/spdx-
spec/issues/1354 - SPDX 3.1-dev SafetyContextRelationship: https://spdx.github.io/spdx-
spec/v3.1-dev/model/ FunctionalSafety/Classes/ SafetyContextRelationship/ I would be happy to contribute a short draft, example metadata fields, or an issue/PR if there is a preferred Eclipse SDV repository or guidance area.
Regards,
Devashri Datta_________________
sdv-wg mailing list
sdv-wg@xxxxxxxxxxx
To unsubscribe from this list, visit https://accounts.eclipse.org
--Dr Ing Sara Gallian
Senior Manager, SDV & Automotive Programs | Eclipse Foundation Europe GmbH
eclipse.org | Twitter | LinkedIn | YouTube
Eclipse Foundation: The Community for Open Innovation and Collaboration