-
At our meeting 2023-11-15, we defined our demo target to be a CLI tool which does these four things:
1. scan dependencies used locally (from some combination of derivation graphs, metadata provided…
-
I'm so glad to see repositories lik Pypi and improving security practices, and appreciated the information at [Trusted Publishers for All Package Repositories | wg-securing-software-repos](https://rep…
-
**Actively monitored security email alias for our project:** kubernetes-security@daocloud.io
**1. Be an actively maintained and CNCF-certified distribution of Kubernetes components.**
[DaoCloud](h…
-
**Is your enhancement proposal related to a problem? Please describe.**
We currently have no process defined for when we do point releases (e.g. 3.0.x, not 3.y).
**Describe the solution you'd li…
-
This is a follow up to this issue https://github.com/cncf/toc/issues/936 and proposes a structured approach implementing the problems mentioned. The goal of this issue is to coordinate the implementat…
-
New charter proposal, reviewers please take note.
# Charter Review
[Charter: EOWG](https://w3c.github.io/charter-drafts/2023/eowg-charter-2023.html)
What kind of charter is this?:
- [x] Exi…
-
### TL;DR:
I am very glad to announce that this repository is now part of the OSSF Organization, so **the Scorecard Visualizer is now an official tool in the OSSF Scorecard ecosystem**. :confetti_b…
-
## Project Documentation & Links
Project Name: RocketChip
Project Repository: https://github.com/chipsalliance/rocket-chip
Project Data File/PR: https://github.com/chipsalliance/tac/blob/main/project…
-
**Describe the change you'd like to see**
We should document in the admin guide how to set up Knative and Kubernetes securely (referencing up-stream guides as appropriate).
Topics might in…
-
This issue contains the Verifiable Credentials Working Group's internationalization self-review of Controller Documents v1.0, which are a generalization of DID Documents and some content from VC Data …