potiuk opened a new issue, #506: URL: https://github.com/apache/airflow-steward/issues/506
### Summary The project-agnostic scaffold `projects/_template/project.md` carries live **Apache Airflow** identity in several config *values* (not just in `# ASF/Airflow default:` example comments). A fresh adopter copying the template inherits Airflow's identity in fields that drive CVE-JSON generation and version extraction, rather than a placeholder they're prompted to fill. Surfaced by a `/magpie-setup upgrade` template-genericity audit (Step 6d) on snapshot `110820e`. ### Concrete residue (`projects/_template/project.md`) | Line | Field | Current value | Expected | |---|---|---|---| | 714 | `product:` | `"Apache Airflow"` | `"<Product Name>"` | | 718 | `product:` | `"Apache Airflow"` | `"<Product Name>"` | | 722 | `product:` | `"Apache Airflow Helm Chart"` | `"<Secondary Product Name>"` | | 837 | `name:` | `Airflow` | `<ProjectShortName>` | | 880 | `affected_version_extract_prefix:` | `"Airflow"` | `"<ProjectShortName>"` | Line 837 is notable because its own comment already says *"Override when: any other project — replace with the canonical short name"* — yet the value itself is a concrete project rather than a `<placeholder>`. The H1 title is already correct (`# TODO: ` `<Project Name>` ` — project manifest`), so the fix is to bring these `cve` / version-extraction values in line with that placeholder convention. ### Lesser (illustrative prose — lower priority) These read as deliberate examples but reinforce the Airflow-centricity; worth a glance: - `projects/_template/README.md:129` — "filled in with the Apache Airflow project's …" - `projects/_template/pr-management-quick-merge-config.md:48` — "shaped for an Apache-Airflow-like monorepo" - `projects/_template/security-tracker-stats.md:91` — "renames the scope labels for a non-Airflow …" ### Suggested fix Replace the hardcoded values in `project.md` with `<placeholder>` tokens consistent with the existing `# ASF/Airflow default:` comments (keep the comment documenting the Airflow default; just make the *value* a placeholder). The illustrative prose can stay or be softened to a generic example at your discretion. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
