From nobody Wed Apr 15 15:23:13 2026 X-Original-To: dev-commits-doc-all@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4fwlJy2dfzz6Z1TL for ; Wed, 15 Apr 2026 15:23:14 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R12" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4fwlJx6z42z3ydy for ; Wed, 15 Apr 2026 15:23:13 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1776266594; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=F10Vab4i85LyTYnudg5rpBnHGIkre6tJhcp5C8ADVVo=; b=H1NBHywi6vRLYlqt3lcdUzx1ZY9uiZbs6ZKsRS3j2s5hwOsqpMbC9Wi0sfzWsGSg1IdXR/ nOS3gZpsRL14ZNOIl0hRcc8IvvUx1gNb1dTpgxYbFl2kSQyfGmWFn+8J/Vg71ynC6TJZAR Bh0CJlv+wHVl0CpLKWQI99yhaL41679SC7n0O9XQZKYqsLIcBi7jRlgp0OJrVB6XFOflnr JPG9P58AMy2xkNrWvy7ZUWP1wvfu1W7g2PkGx7aZOe889SvX/5leZeaQ9/ct/CqEEy3wo/ Z/hfSHenleImRXznPnpjewK1p37u/04avM3mqhq9/VZKGw5Woiq7vA2m27lp8Q== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1776266594; a=rsa-sha256; cv=none; b=SfpsfYUzB5hxl3sfe/Ua1buLT+gHBmtJ/pABgzk3VRhQ1DGb/JRNrPfV7sM70rGmuxYXJA VGgWc15Y5/3s+NWN54Ndg7XMD5IH7SP51zL4AzF99kSkFyt3WlT5kNsU76ZilEZTvubKQw 9mgyYDpGUDAt/8NlM5aD6R2sA2PDq8YZCJRgPe9eIqTElQNmpA+CHQVOsSo9qEaY3y3k98 Si9nriuJDp0d/B1g/7ugrv8egnL6kay/+ytDjuakLXDCGDSzo2mZukVfCKX7UecQSCwA3Y 1Yqar57Iu78BfLafBZZB20KMuFWZ8k0mXiKd5T7/NuGbHbhIWfUW4ZHOMrqHjQ== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1776266594; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=F10Vab4i85LyTYnudg5rpBnHGIkre6tJhcp5C8ADVVo=; b=e91pz+nHRAbOQ6F+Eyu656FrL4td9LQ3w9Cea3ZZKkAUo+9X9i9tptZFJSqSM+FSCcBEVV 9Jsi8ZY+dwg5S4UJeb4c7YsEMoUp+BqElj45LHh+0j6rGZmm2zcWob7Aw3kyeGw0tWiYfk i6gjS1UAxvVcaJROjlXe4JH4W7KVml7AqdFpKIS1/SZSylR6uz+kyLQGPwvPZKXUa+8ikg U+aVWofFfcbogZNXlZHNoKnwaYnDrnjg6B3CZ22nLBkAuo6lctresAXH2qhB0Ov68OSv7u +Zh9fuFyNSF/qF88Zbr/xuj6JEjtKKZI9OFxPI713Ws8AWptYaiLdoSKHcb6zQ== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) by mxrelay.nyi.freebsd.org (Postfix) with ESMTP id 4fwlJx6YLLz9jj for ; Wed, 15 Apr 2026 15:23:13 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from git (uid 1279) (envelope-from git@FreeBSD.org) id 1d3db by gitrepo.freebsd.org (DragonFly Mail Agent v0.13+ on gitrepo.freebsd.org); Wed, 15 Apr 2026 15:23:13 +0000 To: doc-committers@FreeBSD.org, dev-commits-doc-all@FreeBSD.org From: Joseph Mingrone Subject: git: 1b1003c574 - main - status/2026q1: Add Cyber Resilience Act (CRA) entry List-Id: Commit messages for all branches of the doc repository List-Archive: https://lists.freebsd.org/archives/dev-commits-doc-all List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: dev-commits-doc-all@freebsd.org Sender: owner-dev-commits-doc-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: jrm X-Git-Repository: doc X-Git-Refname: refs/heads/main X-Git-Reftype: branch X-Git-Commit: 1b1003c57401b922f2b33b6d3ba2fe8c7ab8f7c1 Auto-Submitted: auto-generated Date: Wed, 15 Apr 2026 15:23:13 +0000 Message-Id: <69dfad61.1d3db.41b08f61@gitrepo.freebsd.org> The branch main has been updated by jrm: URL: https://cgit.FreeBSD.org/doc/commit/?id=1b1003c57401b922f2b33b6d3ba2fe8c7ab8f7c1 commit 1b1003c57401b922f2b33b6d3ba2fe8c7ab8f7c1 Author: Joseph Mingrone AuthorDate: 2026-04-13 18:26:24 +0000 Commit: Joseph Mingrone CommitDate: 2026-04-15 15:22:50 +0000 status/2026q1: Add Cyber Resilience Act (CRA) entry Text author: Alice Sowerby Reviewed by: status (carlavilla, salvadore) Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D56380 --- .../content/en/status/report-2026-01-2026-03/cra.adoc | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/website/content/en/status/report-2026-01-2026-03/cra.adoc b/website/content/en/status/report-2026-01-2026-03/cra.adoc new file mode 100644 index 0000000000..171bec4d2d --- /dev/null +++ b/website/content/en/status/report-2026-01-2026-03/cra.adoc @@ -0,0 +1,16 @@ +=== Cyber Resilience Act (CRA) Readiness Project + +Links: + +link:https://github.com/FreeBSDFoundation/all-projects/tree/main/Cyber%20Resilience%20Act%20Readiness[Cyber Resilience Act Readiness] URL: https://github.com/FreeBSDFoundation/all-projects/tree/main/Cyber%20Resilience%20Act%20Readiness[] + +The Foundation is running a project through 2026 to actively prepare the FreeBSD Foundation, Project, and the community for the EU Cyber Resilience Act. +There are six main areas of focus: Security and Vulnerability Handling, SBOM Toolchain, Public Documentation, Community Legislative Engagement, Public Project Repository, and Communications. + +Over February and March the project has moved from planning into active delivery. +Internal weekly coordination meetings are now in place, and the Foundation's contracted security lead, Pierre Pronchery, has joined the FreeBSD Security Team to align the project work more closely with the FreeBSD Project's existing security processes. + +On the regulatory engagement front, the Foundation co-signed an Open Source Initiative letter to the European Commission supporting voluntary security attestations, contributed to Eclipse Foundation feedback on draft CRA guidance, and attended FOSDEM and FOSS Backstage to collaborate with other open source communities navigating the CRA. + +Technical work on the SBOM toolchain is progressing well, with early automated SBOM generation now under testing. +A public project repository has been created to track progress transparently, a community FAQ has been published, and a dedicated contact address is available for questions. +Outreach to downstream manufacturers has also begun.