tac icon indicating copy to clipboard operation
tac copied to clipboard

Resolve FRSCA

Open presidentoor opened this issue 1 year ago • 10 comments

FRSCA appears to operate within the OpenSSF GitHub Enterprise Org (the parent to the github.com/ossf org), they appear to have a Honk logo, and they appear to be a project within which at least dependabot is active as well as one GH user. This is a tracking issue to monitor-to-resolve the status of FRSCA. The specific question has been posed to the SCI WG, which is claimed on the FRSCA repo as the sponsoring WG.

presidentoor avatar Jul 31 '24 00:07 presidentoor

@hepwori @camaleon2016 please review and comment

SecurityCRob avatar Jul 31 '24 13:07 SecurityCRob

Happy to take a look. What's the actual question referenced by "this specific question has been posed…"?

hepwori avatar Jul 31 '24 15:07 hepwori

The question as to status. I placed it on the SCI WG agenda document.

presidentoor avatar Jul 31 '24 19:07 presidentoor

Ack, got it. @mlieberman85 is closest to this and likely has latest on all the answers you seek. I tagged him in the doc.

hepwori avatar Jul 31 '24 23:07 hepwori

This has come up a few times. FRSCA is a project, but I believe it has been archived or should have been.

mlieberman85 avatar Aug 01 '24 00:08 mlieberman85

@CoS-Harry does this get you what you need? FRSCA should be archived if it's not already :)

hepwori avatar Aug 13 '24 15:08 hepwori

@afmarcum Is archiving FRSCA an open item still from your perspective?

sevansdell avatar Oct 15 '24 23:10 sevansdell

@sevansdell https://github.com/ossf/wg-supply-chain-integrity/issues/73 within the SCI WG repo remains open with @mlieberman85 (maintainer) approving the move to archive the project.

FRSCA does not actively meet, is not actively maintained, and has been removed from OpenSSF materials. The repo and Slack instance have not been not been archived.

I guess the question is whether WG lead approval is required to archive a Technical Initiative if the TI maintainers approve.

Staff can take care of any of admin work required to archive the project, but do not want to overstep the community. If the community is ok to proceed, we can make it happen. (archive repo, Slack channel, submit PR to update SCI WG README, and close both issues) If there are steps that the community prefers to handle directly, please let us know as well.

afmarcum avatar Oct 16 '24 17:10 afmarcum

Let me check with the one maintainer who still pokes around with FRSCA to just make sure he's aware we plan on archiving it unless he plans to resurrect it.

mlieberman85 avatar Oct 16 '24 17:10 mlieberman85

@mlieberman85 what was final decision? Archive?

sevansdell avatar Oct 28 '24 21:10 sevansdell