opencybersecurityalliance / PACE

Posture Attribute Collection and Evaluation
Other
23 stars 4 forks source link

How do we want to organize code repositories? #24

Closed adammontville closed 2 years ago

adammontville commented 2 years ago

Because the PACE architecture includes a collection of components, each of which may have separate implementations based on chosen language, we may be better off with multiple PACE code repositories.

At present, PGB needs to be involved to create new repositories. We may want to make the case that code repository creation be delegated, so that the PGB doesn't need to be involved.

sparrell commented 2 years ago

The PGB decided at the Feb meeting to delegate repo permission to the TSC and the projects (ie project proposes, TSC approves).

But PACE still needs to decide the process for deciding what 'rates' a OCA PACE repo. One proposal (favored by Duncan) is:

We would also need process to decide to archive an repo, particularly if we used the looser first process decided

sparrell commented 2 years ago

Ogres (https://github.com/sparrell/Ogres) could be a test case. I would like it to be a PACE repo but it is still in it's nascent form. I favor opening the source while it's still forming so others can contribute. Most projects to date have come in "already baked". How complete does a repo need to be to be considered for becoming a PACE repo?

slarchacki22 commented 2 years ago

Added to FAQ at the 4/25/2022 PACE meeting