SDAP Version Control Management

2024-01-16 Thread Stepheny Perez
Hi everyone, I propose we discuss and stick to a version control management practice across all SDAP repos moving forward. Currently, our repos are all using different branching strategies which makes development and release management difficult. I've personally used

Re: [DISCUSS] Formal process for adding committers / PMC members

2024-01-16 Thread Riley Kuttruff
I'm personally in favor of the two-tier solution as I think it would be more suitable for growing our community. As Julian said it's a lower barrier to entry. On 2024/01/16 22:53:38 Julian Hyde wrote: > In favor of one tier (everyone who is a committer is on the PMC): > * People perceive that

Re: [DISCUSS] Formal process for adding committers / PMC members

2024-01-16 Thread Julian Hyde
In favor of one tier (everyone who is a committer is on the PMC): * People perceive that there are two tiers to the project (and assume that the PMC is doing something nefarious, when in fact it is usually, quite correctly, doing very little). * Simplicity. In favor of two tiers (some

Re: [DISCUSS] Formal process for adding committers / PMC members

2024-01-16 Thread Riley Kuttruff
I think it's a distinction between project contributor and project management. Probably not a big distinction at the moment because the SDAP community is still relatively small, but that can change. On 2024/01/16 22:47:12 Nga Chung wrote: > I also like the DISCUSS thread example for talking

Re: [DISCUSS] Formal process for adding committers / PMC members

2024-01-16 Thread Nga Chung
I also like the DISCUSS thread example for talking about future committers / PMC members. What is the pro / con of having committers who are not also a PMC member? Thanks, Nga On Tue, Jan 16, 2024 at 7:13 AM Riley Kuttruff wrote: > > Hi Julian, > > That makes a lot of sense as a better

Re: [EXTERNAL] SDAP Monthly Meeting January 16 at 15:00 US/Pacific, 23:00 UTC

2024-01-16 Thread Julian Hyde
Since Thomas raises the point, I think it would be a bad idea to “discuss PMC process” at the meeting. Riley started a thread on dev@ on an important topic — how to nominate and vote for committers and PMC members. We can agree on a process if people respond to the thread and we get to

Re: [EXTERNAL] SDAP Monthly Meeting January 16 at 15:00 US/Pacific, 23:00 UTC

2024-01-16 Thread Riley Kuttruff
I don't think 2FA will be an issue for us, so long as everyone already has it set up. On 2024/01/16 20:46:27 "Huang, Thomas (US 398F)" wrote: > Sorry, I won't be able to join today's meeting. I guess we should discuss > about graduation status and PMC process. > > Public GitHub will be

Re: [EXTERNAL] SDAP Monthly Meeting January 16 at 15:00 US/Pacific, 23:00 UTC

2024-01-16 Thread Huang, Thomas (US 398F)
Sorry, I won't be able to join today's meeting. I guess we should discuss about graduation status and PMC process. Public GitHub will be switching to require 2FA in March. Is SDAP affect? https://github.blog/2023-03-09-raising-the-bar-for-software-security-github-2fa-begins-march-13/ Thanks

Re: [DISCUSS] Formal process for adding committers / PMC members

2024-01-16 Thread Riley Kuttruff
Hi Julian, That makes a lot of sense as a better alternative to the whole nomination process. On 2024/01/11 23:56:13 Julian Hyde wrote: > I don't think the process needs to be very formal (e.g. included in > the bylaws) or agreed before graduation. But it does need to be an > organizational