InnerSourcePatterns
InnerSourcePatterns copied to clipboard
Proven approaches that can guide you through applying open source best practices within your organization
Presented on the Summit 2025, I'll refine later, you can assign this to me.
The translation of our patterns to Galician ("Modelos InnerSource") was even printed! :) The sources for generating this book are available here: https://eira.mancomun.gal/mancomun/modelos-innersource Should we link to this from our...
Add story to the pattern
# Contributors - Date range for contributor list: 2025-11-01 to 2025-11-30 - Repository: ['InnerSourceCommons/InnerSourcePatterns'] | Total Contributors | Total Contributions | % New Contributors | | --- | --- |...
# Issue Metrics | Metric | Average | Median | 90th percentile | | --- | --- | --- | ---: | | Time to first response | None |...
Potential fix for [https://github.com/InnerSourceCommons/InnerSourcePatterns/security/code-scanning/11](https://github.com/InnerSourceCommons/InnerSourcePatterns/security/code-scanning/11) To fix the problem, you should explicitly declare a `permissions` block at the workflow (top) or job (vale job) level. This block should enumerate only the...
Potential fix for [https://github.com/InnerSourceCommons/InnerSourcePatterns/security/code-scanning/10](https://github.com/InnerSourceCommons/InnerSourcePatterns/security/code-scanning/10) To fix this problem, add an explicit `permissions` block at the workflow or job level. Since this workflow doesn't need to write to the repository or...
Potential fix for [https://github.com/InnerSourceCommons/InnerSourcePatterns/security/code-scanning/9](https://github.com/InnerSourceCommons/InnerSourcePatterns/security/code-scanning/9) To fix this problem, add an explicit `permissions` block as recommended to the workflow (either at the root level for all jobs, or at the job...
Potential fix for [https://github.com/InnerSourceCommons/InnerSourcePatterns/security/code-scanning/6](https://github.com/InnerSourceCommons/InnerSourcePatterns/security/code-scanning/6) To fix the problem, add a `permissions` block to the workflow file at the job or root level, specifying the least privileges required for the workflow...
Potential fix for [https://github.com/InnerSourceCommons/InnerSourcePatterns/security/code-scanning/5](https://github.com/InnerSourceCommons/InnerSourcePatterns/security/code-scanning/5) To fix the problem, we should add a `permissions` block to the workflow file `.github/workflows/book.yml`. The block should be added at the workflow root (top-level, after...