Quansight-Labs / czi-conda-forge-mgmt

🚀 Top level project management for conda-forge CZI grant
https://github.com/orgs/Quansight-Labs/projects/10
BSD 3-Clause "New" or "Revised" License
5 stars 0 forks source link

Improve security, performance, reliability and developer experience on conda-forge bots #7

Open jaimergp opened 1 year ago

jaimergp commented 1 year ago

📌 Summary

Work on bots to eliminate long-lived credentials, improve performance and reliability, and develop end-user and maintainer's documentation.

📝 Background

The term "conda-forge bots" encompasses several pieces of automated infrastructure key to the operating status of the organization. It has grown organically, with improvements, additions and hotfixes being made on an "as-needed" basis. As a result the documentation has some gaps that need to be filled.

Since there was no initial design for its current state, no systematic review of its bottlenecks or risks has been performed.

This makes it difficult to maintain, and given the lack of a testing infrastructure, scary to even try if unfamiliar.

The audit report from the first year will have included security recommendations, performance improvement suggestions and reliability measures. On top of that, we will make it easier to for newcomers to contribute to the valuable automation ecosystem in conda-forge.

🚀 Tasks / Deliverables

📅 Estimated completion

This task should be finished in the first 18 months.

ℹī¸ References