Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Prepare all Repos to go PUBLIC #98

Closed
3 tasks done
In-Ko opened this issue Sep 5, 2022 · 5 comments
Closed
3 tasks done

Prepare all Repos to go PUBLIC #98

In-Ko opened this issue Sep 5, 2022 · 5 comments
Labels
area/community Community related

Comments

@In-Ko
Copy link
Member

In-Ko commented Sep 5, 2022

Description
All Repositories under "open-component-model" have to adhere to certain standards before we can switch them from private to public. These standards include:

@In-Ko
Copy link
Member Author

In-Ko commented Oct 12, 2022

Additionally, we need to have some Security Guidelines document. We could use this one here: https://github.com/SAP/.github/blob/main/SECURITY.md We will have to copy and paste the content, as parts don't make sense for us, as we have our own organization and therefore are not part of the SAP org.

@nikimanoledaki
Copy link
Contributor

Great! We can definitely add this. Previously we were given the Gardener Security Release Process as a reference for the Security Policy. I wanted to raise this with you because it was quite specific and hard to apply to OCM. However, this Security Policy that you have linked to looks applicable. I will add it. :)

@nikimanoledaki
Copy link
Contributor

Here is the Flux Security policy: https://github.com/fluxcd/.github/blob/main/SECURITY.md

@nikimanoledaki
Copy link
Contributor

During the last planning meeting, we decided to pause the Security Policy as it is not a blocker to going live.

It is still a requirement. Here is a separate ticket added to the backlog: #153

@ikhandamirov
Copy link
Contributor

Closing as the three tasks mentioned in the description are done.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/community Community related
Projects
None yet
Development

No branches or pull requests

3 participants