Re: [sdv-wg] Safety Relevance Metadata for Automotive / Functional-Safet

[Devashri Datta <devashri.datta@xxxxxxxxx>]

Thanks a lot for the guidance

On Monday, September 7, 2026, Sara Gallian <sara.gallian@xxxxxxxxxxxxxxxxxxxxxx> wrote:

Devashri,

You linked a PR to an existing project called Eclipse SW360. Please reach out to the project directly via the mailing list sw360-dev@xxxxxxxxxxx 

If you wish to engage with the SDV initiative, then please reach out to the TAC. 

Best,

Sara 

On Tue, Sep 8, 2026 at 9:06 AM Devashri Datta <devashri.datta@xxxxxxxxx> wrote:

Hi Sara 

Thanks for the response

I have raised a light weight proposal

https://github.com/eclipse-sw360/sw360/issues/4581

I would be more than happy to discuss in detail

Regards 

Devashri 

On Monday, September 7, 2026, Sara Gallian <sara.gallian@eclipse-foundation.org> wrote:

Dear Devashri,

Thanks for reaching out. Safety is a topic several projects engage with in the Eclipse SDV initiative, particularly Eclipse TSF (a methodology for assessing risk in automotive), Eclipse S-CORE, Eclipse Ankaios, Eclipse uProtocol and others. 

@Krippner Daniel (ETAS-VCS/ETH) has worked with GitHub Actions and metadata for safety artifacts in the context of Eclipse uProtocol. 

My suggestion is to engage with the Technical Advisory Committee, @Peter LeVasseur  is the Chair, and introduce your proposal as a first step. They'll be able to guide you towards the next step. 

In addition, @Dana Vede is part of the Eclipse Foundation staff, and she is our Process Engineer. 

Best,

Sara 

On Fri, Sep 4, 2026 at 8:03 PM Devashri Datta via sdv-wg <sdv-wg@xxxxxxxxxxx> wrote:

Hello Eclipse SDV community,

I recently saw the Eclipse Technical Advisory Council discussion noting an open question around how Eclipse can integrate Safety Relevance Metadata into automotive and functional-safety SBOMs.

I have been working on this exact topic through SRAP/SRIL safety relevance metadata work, including related public discussions and proposals across OpenChain Automotive, SPDX, CycloneDX, and OpenSSF SBOM communities.

I also sent a short note to the Eclipse EMO / Security Team, but wanted to raise this here as well because Eclipse SDV seems like the most relevant community context.

Would there be interest in a concise public proposal or discussion note on how Safety Relevance Metadata could be represented in functional-safety SBOM guidance for Eclipse SDV projects?

Relevant public references:

• OpenChain Automotive discussion: https://github.com/OpenChain-Project/Automotive-Open-Source-Governance-Monthly/discussions/2
• CycloneDX safety relevance proposal: https://github.com/CycloneDX/specification/issues/954
• SPDX safety/risk annotation feedback: https://github.com/spdx/spdx-spec/issues/1354
• SPDX 3.1-dev SafetyContextRelationship: https://spdx.github.io/spdx-spec/v3.1-dev/model/FunctionalSafety/Classes/SafetyContextRelationship/

I would be happy to contribute a short draft, example metadata fields, or an issue/PR if there is a preferred Eclipse SDV repository or guidance area.

Regards,
Devashri Datta

_______________________________________________
sdv-wg mailing list
sdv-wg@xxxxxxxxxxx
To unsubscribe from this list, visit https://accounts.eclipse.org

--

Dr Ing Sara Gallian

Senior Manager, SDV & Automotive Programs | Eclipse Foundation Europe GmbH

eclipse.org | Twitter | LinkedIn | YouTube 

Eclipse Foundation: The Community for Open Innovation and Collaboration

--

Dr Ing Sara Gallian

Senior Manager, SDV & Automotive Programs | Eclipse Foundation Europe GmbH

eclipse.org | Twitter | LinkedIn | YouTube 

Eclipse Foundation: The Community for Open Innovation and Collaboration