Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Software Supply Chain Best Practices v2 markdown #1396

Merged
merged 19 commits into from
Nov 8, 2024
Merged

Conversation

mnm678
Copy link
Collaborator

@mnm678 mnm678 commented Oct 29, 2024

The Software Supply Chain working group has been working on an update to the Software Supply Chain Best Practices Paper. This is the markdown version of the document we have been working on.

Copy link

netlify bot commented Oct 29, 2024

Deploy Preview for tag-security ready!

Name Link
🔨 Latest commit 035f152
🔍 Latest deploy log https://app.netlify.com/sites/tag-security/deploys/672e61b3e730cd0008c7bdcc
😎 Deploy Preview https://deploy-preview-1396--tag-security.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@brandtkeller
Copy link
Collaborator

@mnm678 To what extent do you want to resolve the linter findings before merging this? No hard opinions here - might be a few spelling items worth review.

Authors: Original White Paper authors, Marina Moore, Michael Lieberman, John Kjell, James Carnegie, Ben Cotton
Reviewers:

# Scope: {#scope:}
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Signed-off-by: Marina Moore <[email protected]>
Signed-off-by: Marina Moore <[email protected]>
Signed-off-by: Marina Moore <[email protected]>
@mnm678
Copy link
Collaborator Author

mnm678 commented Oct 31, 2024

The remaining link error is a link to the file added in this pr, which should work once this is merged. And the remaining linter errors are for duplicate headings, which I disagree with (I actually think it's more clear to have a consistent document structure).

Which means this is ready for review!

@jkjell
Copy link
Collaborator

jkjell commented Oct 31, 2024

I made this PR for the linter config which should resolve those. I agree that this should be allowed. #1397

Signed-off-by: Marina Moore <[email protected]>
Signed-off-by: Marina Moore <[email protected]>
Signed-off-by: Marina Moore <[email protected]>
Signed-off-by: Marina Moore <[email protected]>
Copy link
Collaborator

@brandtkeller brandtkeller left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Minor callouts - feel free to consider these against the source-of-truth and otherwise resolve.

I will follow-up with resolving these comments to approve if helpful.

mnm678 and others added 2 commits November 6, 2024 09:46
Co-authored-by: Brandt Keller <[email protected]>
Signed-off-by: Marina Moore <[email protected]>
Signed-off-by: Marina Moore <[email protected]>
@mnm678
Copy link
Collaborator Author

mnm678 commented Nov 6, 2024

Thanks @brandtkeller! Feedback applied

mnm678 and others added 2 commits November 6, 2024 10:58
…urity-paper-v2/SSCBPv2.md

Co-authored-by: Brandt Keller <[email protected]>
Signed-off-by: Marina Moore <[email protected]>
Signed-off-by: Marina Moore <[email protected]>
Copy link
Collaborator

@brandtkeller brandtkeller left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Content looks great - all of my concerns were resolved.

@mnm678 mnm678 merged commit b702fe6 into cncf:main Nov 8, 2024
2 checks passed
@mnm678 mnm678 deleted the SSCSWPv2 branch November 8, 2024 19:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants