I previously used CVS and then Subversion. About ten years ago I was
introduced to Git and have come to prefer it.
Q: 1. Do you have access to GitHub from your z/OS system?
A: yes*
In two recent roles, my team used an internal GitHub server.
Personally I use GitHub.com (heavily) and GItLab.com (somewhat less).
I coulda/woulda/shoulda argued for access to the external servers, but
see below about security.
Q: 2. Do you have git installed on your z/OS system?
A: no
(And this is the asterisk on "yes" above.)
In both roles where I have used GitHub internally, we did not have Git
installed on z/OS.
That could change, but there remains some resistance to using free/libre
open source software directly.
We may or may not have had IP connectivity to the outside servers. (We
*did* have IP connectivity to the inside servers.)
The primary source of resistance is FUD. (And as a security
professional, I will again say, we protect the wrong things.) But there
is also legitimate concern over the supply chain. (The Chicory project
is one of many means to have a solid FLOSS supply chain.)
Aside: we see the increasing use of code signing.
I recommend simple PGP signing of downloadable archives (e.g., TAR files
or PAX files or similar).
This is not to say that we cannot also use PKI based code signing, but
PKI requires third parties and introduces A LOT more moving parts. BT/DT
So I recommend PGP signatures for starters. With an appropriate
web-of-trust PGP is more than sufficient. PKI is not cryptographically
any stronger and has more third party risk.
(This can lead to heated discussion. Apologies for drifting away from
Lionel's question. But it becomes important sooner than later.)
But there are other means of incorporating Git into the z/OS development
cycle.
In both of the roles that I mention, we *did* have SSH, and that
included SCP/SFTP, so we had a secure way of copying files between z/OS
and development workstations.
So there's no reason to *not* use Git with z/OS even if you cannot
install 'git' directly.
I hope this helps.
-- R; <><
On 2/14/24 09:20, Lionel B. Dyck wrote:
As part of the z/OS Open Tools project I'm asking if your z/OS system has
access to GitHub. The reason for this question is that IBM, ISVs, and
open-source developers are increasingly using GitHub.
Questions:
1. Do you have access to GitHub from your z/OS system?
2. Do you have git installed on your z/OS system?
Thank you
Lionel B. Dyck <><
Github:https://github.com/lbdyck
System Z Enthusiasts Discord:
https://discord.gg/system-z-enthusiasts-880322471608344597
“Worry more about your character than your reputation. Character is what you
are, reputation merely what others think you are.” - - - John Wooden
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email tolists...@listserv.ua.edu with the message: INFO IBM-MAIN
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
