Re: CDF Working Groups Proposal
|
Kay Williams <kayw@...>
Agree, thanks Dan (and Kohsuke).
Let me give a concrete example for a Supply Chain Security SIG. This is something Microsoft and GitHub are willing to dedicate resources to and help drive (in collaboration with others). We would like very much to work with a community like the CDF. This is not a Microsoft or GitHub issue alone. And while we are beginning to invest significant resources in this area, we do not want to do it alone. Others are investing as well. We want to join our collective effort and go farther, faster. This is an industry issue. We believe it will take collaboration across many partners and all aspects of the CD process.
Objective: Ensure security (including policy and validation) for software artifacts at each stage of the supply chain from component developer, through package repositories, to application development to end customer runtime operation.
What the group hopes to gain from the CDF: Security is an industry wide concern. It spans all aspects of Continuous Delivery tooling from SCM through CI/CD. Given this, it would seem a natural fit with the CDF charter – ‘A Neutral Home for the Next Generation of Continuous Delivery Collaboration’.
How would the group like to meet/operate: For this topic, it makes sense for a group to meet and operate with a long term charter (like a CNCF SIG), with short term (e.g. 6 month) milestones to make progress.
Anything else to add: Working groups could make sense as a construct for defining the short term milestones, but short term milestones could also be left up to the SIG to define.
Hope this helps.
Kay
From: cdf-toc@... <cdf-toc@...>
On Behalf Of Kohsuke Kawaguchi via Lists.Cd.Foundation
Thanks Dan for doing this, and seeing the difference in what WGs and SIGs mean for different groups is fascinating! One of WGs that I've been more familiar with is W3C WG, which is different still from those mentioned in here. I'm also close to how the Jenkins project uses SIG and "team."
I think it's useful to step back and think about what problems we are trying to solve. I'm not sure if we have an alignment on that.
Dan's document says his WG proposal is for "a temporary group of collaborators focused on completing a defined task." Looking at the lifecycle, maybe it's for the CDF to delegate a certain task to a smaller circle of people who will have easier time doing it (e.g., CDF summit organization), or maybe it's to help people who want to drive certain initiatives by giving them the visibility, the authority, and other necessary support (e.g., usage metrics collection.) Or maybe something else.
FWIW, the problem I see that is worth solving now is to give visibility to technology efforts that are happening on the ground. Take Tekton & Jenkins X collaboration for example. I've heard that there are good things happening there, but I don't know where that is happening. I'm lucky in that I know who are involved, but I'm pretty sure people who are not close to the center have little idea that this is happening, or where they can participate. That translates to missed opportunities for more contributors, more encouragement to existing contributors, and more bragging opportunities of good things that are coming out of the CDF. I think the TOC has a vested interest in propping this up and support good stuff that's already happening.
The other problem I see that is worth solving is a facilitation for people of similar interest to find each other. In a large loosely connected community, people who have a passion to a certain aspect has hard time finding other likeminded people, and they won't get a place to engage themselves. I've seen this a lot in the Jenkins project. When you have a place for likeminded people to talk to each other, sometimes interesting projects/initiatives/efforts come out of it. Just today at the GB meeting, we were talking about the interest of end user companies to get together to compare notes and learn from each other. I won't be surprised if an ongoing conversation like that identifies the opportunities for them to join hands to solve a common problem.
What are the problems people are seeing that are worth solving now?
On Mon, Jun 17, 2019 at 4:41 PM Kay Williams via Lists.Cd.Foundation <kayw=microsoft.com@...> wrote:
-- Kohsuke Kawaguchi
|
||
|
|
