-
Notifications
You must be signed in to change notification settings - Fork 231
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
content: draft: source-track: rename SCP to SCS, replace issue links with project board links. #1171
Conversation
✅ Deploy Preview for slsa ready!
To edit notification comments on pull requests, go to your Netlify site configuration. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think this looks great! I have one suggestion to broaden the definition of the SCS.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good, thanks!
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
👍
Two maintainers seems good enough for a draft. Note: I've updated the title to indicate this is a draft. |
In PR slsa-framework#1171 we replaced 'Source Control Platform' with 'Source Control System'. It looks like we missed a 'Platform' usage. This replaces that last 'Platform' with 'System' Signed-off-by: Tom Hennen <tomhennen@google.com>
In PR #1171 we replaced 'Source Control Platform' with 'Source Control System'. It looks like we missed a 'Platform' usage. This replaces that last 'Platform' with 'System' Signed-off-by: Tom Hennen <tomhennen@google.com>
fixes: #1128
(cleaned up version of #1166)
This change is in response to the 9.30 slsa specification meeting on this topic.
A SCS is the full suite of services and ideas relied upon by the organization to create source revisions.
VCS stuff should mostly fall out of the discussion
Repositories can be used as the concept used when we need to talk about authN and authZ w.r.t. authentic contributions.