DevOps Automation SIG Meeting - Nov 20 2025

[ashukla13]

Date

Thursday, Nov 20 2025 - 12pm ET; 5pm UK

Untracked attendees

Name	Firm	Comment

Meeting notices

• FINOS Project leads are responsible for observing the FINOS guidelines for running project meetings. Project maintainers can find additional resources in the FINOS Maintainers Cheatsheet.

• All participants in FINOS project meetings are subject to the LF Antitrust Policy, the FINOS Community Code of Conduct and all other FINOS policies.

• FINOS meetings involve participation by industry competitors, and it is the intention of FINOS and the Linux Foundation to conduct all of its activities in accordance with applicable antitrust and competition laws. It is therefore extremely important that attendees adhere to meeting agendas, and be aware of, and not participate in, any activities that are prohibited under applicable US state, federal or foreign antitrust and competition laws. Please contact legal@finos.org with any questions.

• FINOS project meetings may be recorded for use solely by the FINOS team for administration purposes. In very limited instances, and with explicit approval, recordings may be made more widely available.

Agenda

• Convene, roll call, welcome new people
• Approve previous meeting minutes
• [x ] Project Controls Center tool from Linux Foundation - update from @karlmoll
  • DevOps SIG should move to this tool by YE - vote
  • All new calls like SDLC controls
• Agentic Code Assistance follow ups - postponed to Dec
  • How are members approaching MCP adoption
  • How are members approaching adoption of autonomous coding agents
• How are members measuring adoption of Gen AI developer tools in a "Quality First" way? postponed to Dec
• Working Group Updates
  • Code Evolution at Scale - @masterkhal @mgasca
  • SDLC common controls catalog - @aaronsearle
• AOB, Q&A & Adjourn

Decisions Made

• Decision 1
• Decision 2
• ...

Action Items

• Action 1
• Action 2
• ...

Zoom info

Join Zoom Meeting

• https://zoom.us/j/94904595244
• Meeting ID: 949 0459 5244
• Passcode: 545224
• Find your local number: https://zoom.us/u/aesEqmNODb

Github Repo: https://github.com/finos/devops-automation/

Project Board: https://github.com/orgs/finos/projects/33

Mailing List: Email devops-mutualization+subscribe@finos.org to subscribe to our mailing list

[rocketstack-matt]

Matthew Bain / Morgan Stanley

[ashukla13]

amol shukla/morgan stanley

[joshbressers]

Josh Bressers / Anchore

[karlmoll]

Karl Moll / FINOS

[bingenito]

Brian Ingenito / Morgan Stanley

[TheJuanAndOnly99]

👋 Juan Estrella / FINOS

[ashukla13]

Minutes:

• Karl and Juan explained how the zoom meeting setup will work with LF project control center; better way to auth for maintainer; will also track attendance automatically; provides registration space to call
• DevOps sig mailing list - we should continue using this
• DECISION - DevOps SIG monthly meeting will switch to the new LF project control center based approach starting from Dec 2025 meeting. Follow up with @masterkhal and @mgasca to switch the Code Evolution at Scale WG to LF project control center
• DECISION - Move up Dec SIG meeting to Dec 11 at noon ET/5pm UK and engage FINOS marketing to get better attendance for discussion around how banks are adopting agentic tools, MCPs, and measuring adoption of Gen AI developer tools in a "Quality First" way
• Update from Karl on SDLC Commons Control Catalog - first control that will be worked on in Supply Chain Software Risks; Josh from OpenSSF "SBOM everywhere"; maintainers should attend ToC meeting to socialize the working group focus as well as specific controls, including for supply chain software risks
• @bingenito reintroduced url-detector and will be presenting at subsequent openssf sbom everywhere meetings

[joshbressers]

https://github.com/ossf/sbom-everywhere