Slide deck baseline for the coming talks about swhid

[Agustin Benito Bethencourt]

Hello,

I will be speaking about SWHID in 3 online forums this month of March. Taking
as reference the content created by Thomas A., which I collaborated with, I am
preparing the baseline for these presentations.

I attach a draft. Tomorrow I will be working on the to have a first complete
deck, which will evolved with each presentation.

Please find the draft attached. Ping me if you would like to have access to the
source (GSheet for now). Any feedback is welcome

Best Regards

--
Agustin Benito Bethencourt
Toscalix Consulting
http://www.toscalix.com/about

[Robbie Morrison]

Hello Agustin, two little things:

• you might like to spell out that the CRA is the EU Cyber Resilience Act (I guess) for non-European audiences and you could therefore perhaps consider a glossary?
• are you going to add a Creative Commons open license (and later upload the PDF to Zenodo)?

good luck, Robbie

On 01/03/2026 20.22, Agustin Benito Bethencourt wrote:

Hello,

I will be speaking about SWHID in 3 online forums this month of March. Taking ..

<snip>

-- 
Robbie Morrison
Address: Schillerstrasse 85, 10627 Berlin, Germany
Phone: +49.30.612-87617

[Agustin Benito Bethencourt]

Hello,

On Sun, 1 Mar 2026, 20:18 Robbie Morrison, <robbie....@posteo.de> wrote:

Hello Agustin, two little things:

• you might like to spell out that the CRA is the EU Cyber Resilience Act (I guess) for non-European audiences and you could therefore perhaps consider a glossary?

Good idea.

• are you going to add a Creative Commons open license (and later upload the PDF to Zenodo)?

About CC, yes. About Zenodo.... I have never used it before. But if it adds value, no problem.

good luck, Robbie

Thank you

On 01/03/2026 20.22, Agustin Benito Bethencourt wrote:

Hello,

I will be speaking about SWHID in 3 online forums this month of March. Taking ..

<snip>

-- 
Robbie Morrison
Address: Schillerstrasse 85, 10627 Berlin, Germany
Phone: +49.30.612-87617

Agustín Benito Bethencourt

Toscalix Consulting

https://toscalix.com/background/consultant/

[Robbie Morrison]

Hello Agustin

On 02/03/2026 00.52, Agustin Benito Bethencourt wrote:

• are you going to add a Creative Commons open license (and later upload the PDF to Zenodo)?

About CC, yes. About Zenodo.... I have never used it before. But if it adds value, no problem.

More on Zenodo on Wikipedia.

Your slide deck would be quite appropriate for Zenodo in my view.  Two advantages: you get persistent storage and you gain a DOI in the process.  But you will normally need to license CC‑BY‑4.0, although other options are available.  In addition, it is easier for academics to cite material from Zenodo than say sourced from an arbitrary project website.

Nice to see this project progressing along!

best, Robbie

[Agustin Benito Bethencourt]

Hello,

On Mon, Mar 2, 2026 at 6:24 AM Robbie Morrison
<robbie....@posteo.de> wrote:
>
> Hello Agustin
>
> On 02/03/2026 00.52, Agustin Benito Bethencourt wrote:
>>
>> are you going to add a Creative Commons open license (and later upload the PDF to Zenodo)?
>
>
> About CC, yes. About Zenodo.... I have never used it before. But if it adds value, no problem.
>
> More on Zenodo on Wikipedia.
>
> Your slide deck would be quite appropriate for Zenodo in my view. Two advantages: you get persistent storage and you gain a DOI in the process. But you will normally need to license CC‑BY‑4.0, although other options are available. In addition, it is easier for academics to cite material from Zenodo than say sourced from an arbitrary project website.

Sold!

[...]

Best Regards

Agustin

[Morane GRUENPETER]

Hi Agustin, hi all,

Very nice slides!

I agree with Robbie, and you should all know we have a Software Heritage community on Zenodo for materials:

https://zenodo.org/communities/software-heritage/records?q=&l=list&p=1&s=10&sort=newest

After you deposit, you can request that the deposit be included in the SWH community.

Kind regards,

--
Morane Ottilia GRUENPETER
Director of Scholarly Ecosystem Engagement and Operations
Software Heritage http://www.softwareheritage.org
Fondation Inria, Paris

--
You received this message because you are subscribed to the Google Groups "SWHID (Software Hash Identifiers) discussions" group.
To unsubscribe from this group and stop receiving emails from it, send an email to swhid-discus...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/swhid-discuss/CAK3uqb7VY69j0w0B_wuRFQkCkCS%3DhvmUycAGf3hRhATY_R5s1g%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

[Robbie Morrison]

Hello Agustin, hi Morane, hi all

Just to note that Zotero supports versioning — each version getting a new DOI, and the suite getting a separate "resolve to latest" DOI as well.

Robbie

On 02/03/2026 14.19, Morane GRUENPETER wrote:

After you deposit, you can request that the deposit be included in the SWH community.

-- 
Robbie Morrison
Address: Schillerstrasse 85, 10627 Berlin, Germany
Phone: +49.30.612-87617

[Agustin Benito Bethencourt]

Hello,

On Sunday, 1 March 2026 23:52:58 WET Agustin Benito Bethencourt wrote:
> Hello,
>
>
>

> On Sun, 1 Mar 2026, 20:18 Robbie Morrison, <robbie....@posteo.de>
>

PLease find attached the deck I used in the first of my talks. There will be a
second one on Wednesday, focused on SBOMs.

You will find the links to that Wednesday talk in one of the slides.

You will find in the coming video the questions I got. It is clear to me that
is hard to understand the potential of SWHID if audiences do not understand
the syntax and the concept of Merkle tree. How to abstract such explanations
for the different audiences is the challenge.

The pURL vs SWHID question came right away.

[Bastien Guerry]

Hello Agustin,

> PLease find attached the deck I used in the first of my talks. There
> will be a second one on Wednesday, focused on SBOMs.

Thanks a lot for sharing this!

> It is clear to me that is hard to understand the potential of SWHID if
> audiences do not understand the syntax and the concept of Merkle tree.

Yes, that can be a blocker. Showing the difference between intrinsic and
extrinsic identifiers can also be a challenge, your presentation does a
good job of that IMHO.

Best,

--
Bastien

[Agustin Benito Bethencourt]

Hello,

On Monday, 2 March 2026 17:18:08 WET Agustin Benito Bethencourt wrote:
> Hello,
>
> On Sunday, 1 March 2026 23:52:58 WET Agustin Benito Bethencourt wrote:
> > Hello,
> >
> >
> >
> > On Sun, 1 Mar 2026, 20:18 Robbie Morrison, <robbie....@posteo.de>
>
> PLease find attached the deck I used in the first of my talks. There will be
> a second one on Wednesday, focused on SBOMs.

The talk is on Thursday, not on Wednesday.

Please find attached the draft of the slide deck for the coming talk, targeting
the OpenChain Telco Working Group.

In addition to developing the SWHID and SBOM use case section, I have
introduced improvements in other sections.

This Telco WG are the authors of the OpenChain SBOM Telco Guide, which propose
a data schema on top of SPDX to create SBOM for this industry, which has been
picked up as a baseline for other industry groups within OpenChain. Such data
schema includes pURL as identifier, but not SWHID, unlike SPDX.

The goal is that they see SWHID as complementary to pURL so they include it in
their next version as valid identifier. My talk at the end of the month
targeting the OpenChain Automotive Group will have a similar goal.

[Agustin Benito Bethencourt]

Hello,

On Wednesday, 4 March 2026 00:28:55 WET Agustin Benito Bethencourt wrote:
> Hello,
>
> On Monday, 2 March 2026 17:18:08 WET Agustin Benito Bethencourt wrote:
> > Hello,
> >
> > On Sunday, 1 March 2026 23:52:58 WET Agustin Benito Bethencourt wrote:
> > > Hello,
> > >
> > >
> > >
> > > On Sun, 1 Mar 2026, 20:18 Robbie Morrison, <robbie....@posteo.de>
> >
> > PLease find attached the deck I used in the first of my talks. There will
> > be a second one on Wednesday, focused on SBOMs.

Please find attached the final version for tomorrow's talk.
* I have extended the SWHID and SBOM use case.
* I have provided references beyond CRA, generalising some of the conclusions
to legislation requirements, in general
* I have added a specific slide to recommend the addition of SWHID in the SBOM
Telco Guide
* I have taken the risk to add a SBOM verification scenario in Telco(slide 64).
Not sure I should. If it works...
* I have partially adapted the takeaways to the audience

This is the deck I will upload to zenodo

[...]

[Agustin Benito Bethencourt]

Hello,

On Wednesday, 4 March 2026 22:45:33 WET Agustin Benito Bethencourt wrote:
> Hello,
>
> On Wednesday, 4 March 2026 00:28:55 WET Agustin Benito Bethencourt wrote:
> > Hello,
> >
> > On Monday, 2 March 2026 17:18:08 WET Agustin Benito Bethencourt wrote:
> > > Hello,
> > >
> > > On Sunday, 1 March 2026 23:52:58 WET Agustin Benito Bethencourt wrote:
> > > > Hello,
> > > >
> > > >
> > > >
> > > > On Sun, 1 Mar 2026, 20:18 Robbie Morrison, <robbie....@posteo.de>
> > >
> > > PLease find attached the deck I used in the first of my talks. There
> > > will
> > > be a second one on Wednesday, focused on SBOMs.
>
> Please find attached the final version for tomorrow's talk.
> * I have extended the SWHID and SBOM use case.
> * I have provided references beyond CRA, generalising some of the
> conclusions to legislation requirements, in general
> * I have added a specific slide to recommend the addition of SWHID in the
> SBOM Telco Guide
> * I have taken the risk to add a SBOM verification scenario in Telco(slide
> 64). Not sure I should. If it works...
> * I have partially adapted the takeaways to the audience
>
> This is the deck I will upload to zenodo

And.... https://zenodo.org/records/18879288

[Robbie Morrison]

Hi Agustin

And.... https://zenodo.org/records/18879288

I think your PDF still needs to be added to the Software Heritage space on Zenodo:

• https://zenodo.org/communities/software-heritage/records?q=&l=list&p=1&s=10&sort=newest

Perhaps Morane can help?

best, Robbie

[Morane Gruenpeter]

Thanks Agustin for the deposit and to Robbie for pointing out that the community is missing.

Actually, only de author can request to be added to a community.

@Agustin: let me know in private if you have troubles with this and I'll share the instructions. 

Cheers,

--
Morane Ottilia GRUENPETER
Director of Scholarly Ecosystem Engagement and Operations
Software Heritage http://www.softwareheritage.org
Fondation Inria, Paris

--

You received this message because you are subscribed to the Google Groups "SWHID (Software Hash Identifiers) discussions" group.
To unsubscribe from this group and stop receiving emails from it, send an email to swhid-discus...@googlegroups.com.

To view this discussion visit https://groups.google.com/d/msgid/swhid-discuss/71bfb5f7-be1d-432e-adcf-f58c18c8912b%40posteo.de.