Update the repo team ownership according to the CODEOWNERS/MAINTAINERS files

[toddysm]

Currently there is no github team with permissions to maintain this repository. For the purpose of segregation of duties, I propose to have repo ownership team with members listed in the CODEOWNERS/MAINTAINERS files. The proposal is to create a GitHub team with the name notaryproject-governance-maintainers with members from the above files and assigning this team ownership of the .github repository.

[yizha1]

LGTM

[SteveLasker]

I believe this is about:

• org maintainers
• sub-project maintainers

As the project evolved, additional repos have been added:

• notation-core-go
• notation-go
• notaryproject.dev
• meeting-notes
• .github
• roadmap

I'd suggest creating another issue to capture and clarify the relationship between:

• Notary v1 notary
• Notary v2 (aka notation) (collection of repos)
• TUF incubation

And the additional repos that span the org:

• Org Governance - currently split between notary and .github PRs
• Website content, which spans the breadth of the project
• Roadmap, also meant to cover the breadth of the org project.

[toddysm]

I am confused. This particular issue (#4) is about the .github repository under the Notary Project organization. As a good security practice, we should have separate teams for each repository so we can manage repository access on a granular basis. My proposal is to match have the folks included in the https://github.com/notaryproject/.github/blob/main/CODEOWNERS file for the .github repository in a GH Team that owns the .github repository.

The CNCF TOC @mattfarina already created an issue for clarifying the relationship between name, sub-projects, and repos. I believe you are asking for the same. There is also issue #3 about the overall Org maintainers.

Regarding the governance split between notary and .github repository, it was agreed in the community that we will migrate all the governance to the .github repository. Though, right now we are struggling with having approvals on any PR in the .github repository because of the block on this particular ask (#4). So, can we move this one and progress faster?

To explain what the block is, none of the people actively working on the governance have CODEOWNERS rights on the .github repository because they are neither ORG maintainers or repo owners. I am asking to make them repo owners.

[priteshbandi]

LGTM

[vaninrao10]

LGTM

[iamsamirzon]

LGTM IANAM

[NiazFK]

LGTM

[FeynmanZhou]

LGTM to create a GitHub team for CODEOWNERS/MAINTAINERS.

[toddysm]

Based on the above approvals from active maintainers this is completed to unblock PR approvals for this repository.