This is an automated email from the ASF dual-hosted git repository.
wave pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tooling-docs.git
The following commit(s) were added to refs/heads/main by this push:
new 4120dc3 Update Lifecycle Diagram
4120dc3 is described below
commit 4120dc3e7792830a3ff6bca6a8db047cc23046ae
Author: Dave Fisher <dave2w...@comcast.net>
AuthorDate: Mon Jan 27 20:17:04 2025 -0800
Update Lifecycle Diagram
---
apache-trusted-release/lifecycle.md | 17 +++++++++--------
1 file changed, 9 insertions(+), 8 deletions(-)
diff --git a/apache-trusted-release/lifecycle.md
b/apache-trusted-release/lifecycle.md
index 53a3b35..5877d09 100644
--- a/apache-trusted-release/lifecycle.md
+++ b/apache-trusted-release/lifecycle.md
@@ -9,21 +9,22 @@ flowchart TD
B -->|manually triggered| C
subgraph ATR Platform
D@{ shape: processes, label: "Evaluate Candidate" }
- DD@{ shape: process, label: "Sign Candidate" }
C --> D
+ DD@{ shape: process, label: "Sign Candidate" }
+ D -->|pass| DD
E@{ shape: sl-rect, label: "Release Vote" }
+ JJ@{ shape: docs, label: "Release" }
+ E -->|pass| JJ
F@{ shape: dbl-circ, label: "Failed" }
+ D -->|failure| F
+ E -->|failure| F
FF@{ shape: dbl-circ, label: "Distribution\nFailed" }
- D -->|pass| DD
DD --> E
- D -->|failure| F
F -->|new candidate| C
F -->|abandon| K
FF -->|retry| G
FF -->|abandon| K
G@{ shape: processes, label: "Distribute" }
- E -->|pass| JJ
- E -->|failure| F
H@{ shape: trap-t, label: "Manual Distribution" }
G -->|optional| H
I[Announce Release]
@@ -31,15 +32,13 @@ flowchart TD
G -->|failure| FF
H -->|manually triggered| I
J@{ shape: dbl-circ, label: "Released" }
- JJ@{ shape: docs, label: "Release" }
JJ --> G
I --> J
K@{ shape: dbl-circ, label: "Revoked" }
L@{ shape: trap-t, label: "Announce CVEs" }
J -->|revoke| K
J -->|cves| L
- L -->|announced| J
- L -->|revoke| K
+ L -->|record cves| J
end
```
@@ -90,3 +89,5 @@ flowchart TD
**Revoked**
: A Release in this state has been revoked or abandoned.
+**Announce CVEs**
+: At some moment after a release happens a project may announce CVEs that
either impact a release or are solved by a release. The security team and PMC
manage CVEs including announcements and publishing via cveprocess.apache.org
The ATR will update SBOMs with new CVEs.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tooling.apache.org
For additional commands, e-mail: dev-h...@tooling.apache.org
