Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add Approved technical charter for Criticality Score #680

Closed
wants to merge 28 commits into from
Closed

Add Approved technical charter for Criticality Score #680

wants to merge 28 commits into from

Conversation

riaankleinhans
Copy link
Contributor

The chart have been approved by the LF formation team.
This PR replace #568

redenmartinez and others added 28 commits September 4, 2024 14:00
@redenmartinez @riaankleinhans
Technical Charter
051c59a 
Signed-off-by: riaan kleinhans <[email protected]>
@hythloda @riaankleinhans
Update CHARTER.md
053d2b1 
Signed-off-by: Amanda L Martin <[email protected]>
Signed-off-by: riaan kleinhans <[email protected]>
@calebbrown @riaankleinhans
Fix the "v2" behavior to match Go's git + mod functionality. (ossf#563)
d7a3cf1 
Signed-off-by: Caleb Brown <[email protected]>
Signed-off-by: riaan kleinhans <[email protected]>
@calebbrown @riaankleinhans
Add @latest to go install commands in docs. (ossf#572)
2d69f99 
Signed-off-by: Caleb Brown <[email protected]>
Signed-off-by: riaan kleinhans <[email protected]>
@dependabot @riaankleinhans
Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 (ossf#562)
c8f5c78 
Bumps google.golang.org/protobuf from 1.32.0 to 1.33.0.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
@dependabot @riaankleinhans
Bump github.com/hasura/go-graphql-client from 0.12.0 to 0.12.1 (ossf#559
900a0ba 
)

Bumps [github.com/hasura/go-graphql-client](https://github.com/hasura/go-graphql-client) from 0.12.0 to 0.12.1.
- [Release notes](https://github.com/hasura/go-graphql-client/releases)
- [Commits](hasura/go-graphql-client@v0.12.0...v0.12.1)

---
updated-dependencies:
- dependency-name: github.com/hasura/go-graphql-client
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
@dependabot @riaankleinhans
Bump golang.org/x/sys from 0.17.0 to 0.18.0 (ossf#561)
8329b09 
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.17.0 to 0.18.0.
- [Commits](golang/sys@v0.17.0...v0.18.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
@dependabot @riaankleinhans
Bump google.golang.org/api from 0.156.0 to 0.170.0 (ossf#570)
aebf974 
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.156.0 to 0.170.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.156.0...v0.170.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
@dependabot @riaankleinhans
Bump cloud.google.com/go/bigquery from 1.57.1 to 1.59.1 (ossf#544)
160b7f2 
Bumps [cloud.google.com/go/bigquery](https://github.com/googleapis/google-cloud-go) from 1.57.1 to 1.59.1.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@bigquery/v1.57.1...bigquery/v1.59.1)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/bigquery
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
@dependabot @riaankleinhans
Bump gocloud.dev from 0.36.0 to 0.37.0 (ossf#565)
f9ac845 
Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.36.0 to 0.37.0.
- [Release notes](https://github.com/google/go-cloud/releases)
- [Commits](google/go-cloud@v0.36.0...v0.37.0)

---
updated-dependencies:
- dependency-name: gocloud.dev
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
@calebbrown @riaankleinhans
Fix linter issues (ossf#589)
156c2a5 
* Update go.work.sum

Signed-off-by: Caleb Brown <[email protected]>

* Add a long timeout for golanci-lint

Signed-off-by: Caleb Brown <[email protected]>

---------

Signed-off-by: Caleb Brown <[email protected]>
Signed-off-by: riaan kleinhans <[email protected]>
@dependabot @riaankleinhans
Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 in /tools (ossf…
e25f35d 
…#569)

Bumps google.golang.org/protobuf from 1.31.0 to 1.33.0.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
@dependabot @riaankleinhans
Bump golang.org/x/sys from 0.18.0 to 0.19.0 (ossf#583)
0de8006 
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.18.0 to 0.19.0.
- [Commits](golang/sys@v0.18.0...v0.19.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
@dependabot @riaankleinhans
Bump actions/checkout from 4.1.1 to 4.1.2 (ossf#566)
4d1396c 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.1 to 4.1.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@b4ffde6...9bb5618)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
@dependabot @riaankleinhans
Bump cloud.google.com/go/bigquery from 1.59.1 to 1.60.0 (ossf#581)
b636d5e 
Bumps [cloud.google.com/go/bigquery](https://github.com/googleapis/google-cloud-go) from 1.59.1 to 1.60.0.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@bigquery/v1.59.1...spanner/v1.60.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/bigquery
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
@dependabot @riaankleinhans
Bump google.golang.org/api from 0.170.0 to 0.174.0 (ossf#587)
6fd4eb8 
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.170.0 to 0.174.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.170.0...v0.174.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
@dependabot @riaankleinhans
Bump github/codeql-action from 3.24.3 to 3.25.1 (ossf#588)
9a91e8b 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.24.3 to 3.25.1.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](github/codeql-action@v3.24.3...v3.25.1)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
@dependabot @riaankleinhans
Bump actions/upload-artifact from 4.3.1 to 4.3.2 (ossf#590)
2af431b 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.1 to 4.3.2.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@5d5d22a...1746f4a)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
@dependabot @riaankleinhans
Bump github.com/golangci/golangci-lint from 1.56.2 to 1.57.2 in /tools (
1b8125b 
ossf#582)

Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.56.2 to 1.57.2.
- [Release notes](https://github.com/golangci/golangci-lint/releases)
- [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md)
- [Commits](golangci/golangci-lint@v1.56.2...v1.57.2)

---
updated-dependencies:
- dependency-name: github.com/golangci/golangci-lint
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
@dependabot @riaankleinhans
Bump golang.org/x/net from 0.22.0 to 0.23.0 (ossf#591)
8e9e42a 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.22.0 to 0.23.0.
- [Commits](golang/net@v0.22.0...v0.23.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
@calebbrown @riaankleinhans
Fix the issue lookback duration to be 90 days. (ossf#605)
76d7572 
Signed-off-by: Caleb Brown <[email protected]>
Signed-off-by: riaan kleinhans <[email protected]>
@dependabot @riaankleinhans
Bump google.golang.org/protobuf from 1.33.0 to 1.34.0 (ossf#606)
007bf19 
Bumps google.golang.org/protobuf from 1.33.0 to 1.34.0.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
@dependabot @riaankleinhans
Bump github/codeql-action from 3.25.1 to 3.25.3 (ossf#601)
10980de 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.25.1 to 3.25.3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](github/codeql-action@v3.25.1...v3.25.3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
@dependabot @riaankleinhans
Bump google.golang.org/api from 0.174.0 to 0.177.0 (ossf#607)
695f457 
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.174.0 to 0.177.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.174.0...v0.177.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
@dependabot @riaankleinhans
Bump cloud.google.com/go/bigquery from 1.60.0 to 1.61.0 (ossf#600)
41674ff 
Bumps [cloud.google.com/go/bigquery](https://github.com/googleapis/google-cloud-go) from 1.60.0 to 1.61.0.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@spanner/v1.60.0...bigquery/v1.61.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/bigquery
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
@dependabot @riaankleinhans
Bump golang.org/x/sys from 0.19.0 to 0.20.0 (ossf#610)
14b97be 
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.19.0 to 0.20.0.
- [Commits](golang/sys@v0.19.0...v0.20.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: riaan kleinhans <[email protected]>
@dbaston @riaankleinhans
Fix typo in README.md (ossf#620)
8405019 
Signed-off-by: Dan Baston <[email protected]>
Signed-off-by: riaan kleinhans <[email protected]>
@riaankleinhans
update charter
e515d70 
Signed-off-by: riaan kleinhans <[email protected]>
@riaankleinhans
Copy link
Contributor Author

Created this off @redenmartinez 's charter branch which make this way to messy. Will create a new PR of Main

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
5 participants
@riaankleinhans @redenmartinez @hythloda @calebbrown @dbaston