Chris Aniszczyk

note: as an option for you if you migrate to the CNCF Slack you get away from the 10K message limit :) On Wed, Sep 16, 2020 at 11:35 AM...

The CNCF allowlist is here: https://github.com/cncf/foundation/blob/master/allowed-third-party-license-policy.md MPL isn't allowed by default but we have a lot of MPL libraries that have been approved in CNCF https://github.com/cncf/foundation/tree/master/license-exceptions What is the particular...

@tigrannajaryan open up an issue here to get new libraries added to the allow list: https://github.com/cncf/foundation/issues We have to get the CNCF board (GB) to sign off. Second, MPL is...

Our advice is to not mess with the copyright notices and properly attribute the code: https://github.com/cncf/foundation/blob/master/copyright-notices.md We also recommend hooking up a tool like https://github.com/fossas/fossa-cli for license scanning + attribution...

The README of the project would suffice, you just need attribution somewhere. On Tue, Feb 2, 2021 at 10:16 AM Nikita Salnikov-Tarnovski < [email protected]> wrote: > @open-telemetry/governance-committee > Any >...

I just want to re-iterate that CNCF lets projects choose your own infrastructure. The reason groups.io is available is things like Google Groups are banned in China. You can potentially...

As an FYI @cncf/tag-security folks, CNCF is supporting fuzzing work for projects and we think that maybe TAG Security is a good home for some of this work + discussion.

hey @lucperkins from the CNCF can sketch out a simple hugo+netlify site we can do something like sig-security.cncf.io

It would be great if accepted, incubation and graduation dates would be reflected on the project cards

We can probably put this as "CNCF Accepted Date: " - "CNCF Incubation Date: " - "CNCF Graduated Date: "