slsa-framework
Remove references to 'people' in Source Requirements
Per guiding principles we want to support anonymous contributions.
Given that, language like attribute those changes to the people that made them seems to exceed the bounds of what we're looking for.
Consider replacing 'people' with 'actors' and conduct a review of the rest of the text to see if this sort of thing exists anywhere else.
@TomHennen you can assign this to me, i'm happy to find/replace across the spec/site
@TomHennen you can assign this to me, i'm happy to find/replace across the spec/site
Done, thank you!
These are the pages in which the terms 'people', 'person' or 'persons' are used:
- https://slsa.dev/spec/draft/principles
- https://slsa.dev/spec/v1.1/threats-overview
- https://slsa.dev/spec/v1.1/use-cases
- https://slsa.dev/spec/v1.1/principles
- https://slsa.dev/spec/v1.1/terminology
- https://slsa.dev/spec/v1.1/requirements
- https://slsa.dev/spec/v1.1/verifying-systems
- https://slsa.dev/spec/v1.1/threats
- https://slsa.dev/spec/v1.1/provenance
I'll review them individually, as there are phrases where substituting the words with 'actor' would unlikely make sense.
So far...
- Raised https://github.com/slsa-framework/slsa/pull/1404 for https://slsa.dev/spec/draft/principles
- Raised https://github.com/slsa-framework/slsa/pull/1405 for https://slsa.dev/spec/v1.1/principles
The following reference "Two-person review", which I believe is a relatively ubiquitous term. I don't think it makes sense to change this:
- https://slsa.dev/spec/v1.1/threats-overview
- https://slsa.dev/spec/v1.1/use-cases
I plan to complete the rest this week.
Submitted additional PRs: https://slsa.dev/spec/v1.1/requirements > https://github.com/slsa-framework/slsa/pull/1448 https://slsa.dev/spec/v1.1/threats > https://github.com/slsa-framework/slsa/pull/1449 https://slsa.dev/spec/v1.1/provenance > https://github.com/slsa-framework/slsa/pull/1450
The following reference "Two-person review", which as mentioned previously, is a relatively ubiquitous term. I don't think it makes sense to update these: https://slsa.dev/spec/v1.1/terminology https://slsa.dev/spec/v1.1/verifying-systems
