From 6f9e7d6eebc5b76e6d24ce9839d7bc065aae6ead Mon Sep 17 00:00:00 2001 From: CRob <69357996+SecurityCRob@users.noreply.github.com> Date: Fri, 15 Mar 2024 11:38:49 -0400 Subject: [PATCH 1/3] Create BEST_practices_wg_graduation_stage.md PR to recognize BEST WG is "graduated" in lifecycle Signed-off-by: CRob <69357996+SecurityCRob@users.noreply.github.com> --- .../BEST_practices_wg_graduation_stage.md | 41 +++++++++++++++++++ 1 file changed, 41 insertions(+) create mode 100644 process/wg-lifecycle-documents/BEST_practices_wg_graduation_stage.md diff --git a/process/wg-lifecycle-documents/BEST_practices_wg_graduation_stage.md b/process/wg-lifecycle-documents/BEST_practices_wg_graduation_stage.md new file mode 100644 index 0000000..cdb898b --- /dev/null +++ b/process/wg-lifecycle-documents/BEST_practices_wg_graduation_stage.md @@ -0,0 +1,41 @@ +## Working Group graduation application +BEST Practices Working Group + +### WG has met all Incubating requirements + * n/a + +### List of regular contributors +The WG must have at least 5 contributors from at least 3 different organizations attending regularly as recorded in meeting minutes. +- [Christopher "CRob" Robinson*, Intel](https://github.com/SecurityCRob) +- [David A Wheeler, LF/OSSF](https://github.com/david-a-wheeler) +- [Dave Russo*, Red Hat](https://github.com/drusso-rh) +- [Randall T. Vasquez*, The Linux Foundation](https://github.com/ran-dall) +- [Arnaud J Le Hors, IBM](https://github.com/lehors) +- [Christine Abernathy*, F5](https://github.com/caabernathy) +- [Daniel Applequist*, Snyk](https://github.com/Torgo) +- [Georg Kunz, Ericsson](https://github.com/gkunz) +- [Sarah Evans, Dell](https://github.com/sevansdell) - Security Toolbelt SIG Co-Lead +- [John Kjell, TestifySec](https://github.com/jkjell) - Security toolbelt SIG Co-lead +- [Thomas Nyman, Ericsson](https://github.com/thomasnyman) - C/C++ Compiler Guide SIG Lead +- [Nell Shamrell-Harrington](https://github.com/nellshamrell) - Memory Safety SIG Lead +- [Avishay Balter, Microsoft](https://github.com/balteravishay) - Memory Safety SIG Co-Lead + + +### Governance +Projects have met at least 4 times over a period of at least 2 months since becoming incubating + * [2024 Meeting Notes](https://docs.google.com/document/d/1JY8FREBPCUUFpuv7-4B9EjeS2MLDpel0dbG5DFWrTns/edit) + * [Historic Meeting Notes](https://github.com/ossf/wg-best-practices-os-developers/tree/main/minutes) + + +### TI References +The TI must provide a list of existing resources with links to the repository, website, a roadmap, contributing guide, demos and walkthroughs, and any other material to showcase the existing breadth, maturity, and direction of the project. + Reference | URL | +|-----------------------|-----| +| Repo | https://github.com/ossf/wg-best-practices-os-developers | +| Meeting Agenda | https://docs.google.com/document/d/1JY8FREBPCUUFpuv7-4B9EjeS2MLDpel0dbG5DFWrTns/edit | +| OSSF Calendar Entry | https://github.com/ossf/wg-best-practices-os-developers#meeting-times | +| Website | https://best.openssf.org/developers | +| Contributing guide | https://github.com/ossf/wg-best-practices-os-developers?tab=readme-ov-file#quick-start | +| Security.md | https://github.com/ossf/wg-best-practices-os-developers/blob/main/SECURITY.md | +| Roadmap | https://github.com/ossf/wg-best-practices-os-developers?tab=readme-ov-file#roadmap | +| Other | | From 4bcd85a5b6887f034fc628f7584198807ce35621 Mon Sep 17 00:00:00 2001 From: Arnaud J Le Hors Date: Wed, 20 Mar 2024 14:58:55 +0100 Subject: [PATCH 2/3] Add README update Signed-off-by: Arnaud J Le Hors --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index d7b52d3..8398a55 100644 --- a/README.md +++ b/README.md @@ -54,7 +54,7 @@ The following Technical Initiatives have been approved by the TAC: | ---------------------------- | ------------------------------------------------------- | ------------------------------------------------------------------------------------------------------ | ---------- | | Vulnerability Disclosures | https://github.com/ossf/wg-vulnerability-disclosures | [Meeting Notes](https://github.com/ossf/wg-vulnerability-disclosures/tree/main/docs/meeting-notes) | Incubating | | Security Tooling | https://github.com/ossf/wg-security-tooling | [Meeting Notes](https://docs.google.com/document/d/1jzxhzIfkOMTagpeFWYoZpMKwHYeO4Gc7Eq5FcMFEw2c/edit#heading=h.wdz394z3k3h2) | Incubating | -| Security Best Practices | https://github.com/ossf/wg-best-practices-os-developers | [Meeting Notes](https://github.com/ossf/wg-best-practices-os-developers/blob/main/meeting-minutes.md) | Incubating | +| Security Best Practices | https://github.com/ossf/wg-best-practices-os-developers | [Meeting Notes](https://github.com/ossf/wg-best-practices-os-developers/blob/main/meeting-minutes.md) | [Graduated](process/wg-lifecycle-documents/BEST_practices_wg_graduation_stage.md)) | | Metrics & Metadata | https://github.com/ossf/wg-metrics-and-metadata | [Meeting Notes](https://docs.google.com/document/d/14_ILDhSK3ymKqUTQeQBRgJKgfiy_ePoGZIe8s7p3K5E/edit) | Incubating | | Securing Critical Projects | https://github.com/ossf/wg-securing-critical-projects | [Meeting Notes](https://docs.google.com/document/d/1GFslP6elYCx27TUitdigDr1gsOItYkL0Vq7hTB9y4Lo/edit) | Incubating | | Supply Chain Integrity | https://github.com/ossf/wg-supply-chain-integrity | [Meeting Notes](https://docs.google.com/document/d/1xPs2sSbH3I9Ich7OyLOzl85oJshnK8Q6WoAgREE5-zA/edit) | Incubating | From 8c1e975a37eb05208afecf757953fdbcc1a8556d Mon Sep 17 00:00:00 2001 From: CRob <69357996+SecurityCRob@users.noreply.github.com> Date: Wed, 20 Mar 2024 12:22:19 -0400 Subject: [PATCH 3/3] Update BEST_practices_wg_graduation_stage.md added link to wg charter Signed-off-by: CRob <69357996+SecurityCRob@users.noreply.github.com> --- .../wg-lifecycle-documents/BEST_practices_wg_graduation_stage.md | 1 + 1 file changed, 1 insertion(+) diff --git a/process/wg-lifecycle-documents/BEST_practices_wg_graduation_stage.md b/process/wg-lifecycle-documents/BEST_practices_wg_graduation_stage.md index cdb898b..c75718b 100644 --- a/process/wg-lifecycle-documents/BEST_practices_wg_graduation_stage.md +++ b/process/wg-lifecycle-documents/BEST_practices_wg_graduation_stage.md @@ -23,6 +23,7 @@ The WG must have at least 5 contributors from at least 3 different organizations ### Governance Projects have met at least 4 times over a period of at least 2 months since becoming incubating + * [BEST WG Charter](https://github.com/ossf/wg-best-practices-os-developers/blob/main/CHARTER.md) * [2024 Meeting Notes](https://docs.google.com/document/d/1JY8FREBPCUUFpuv7-4B9EjeS2MLDpel0dbG5DFWrTns/edit) * [Historic Meeting Notes](https://github.com/ossf/wg-best-practices-os-developers/tree/main/minutes)