This is an automated email from the ASF dual-hosted git repository. wave pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tooling-docs.git
The following commit(s) were added to refs/heads/main by this push: new 715c9ee Various Requirement Adjustments 715c9ee is described below commit 715c9eedd09e70e65f3ee4e703425542ead3830b Author: Dave Fisher <dave2w...@comcast.net> AuthorDate: Wed Feb 5 12:07:12 2025 -0800 Various Requirement Adjustments --- apache-trusted-release/requirements.md | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/apache-trusted-release/requirements.md b/apache-trusted-release/requirements.md index 1d588a2..cede365 100644 --- a/apache-trusted-release/requirements.md +++ b/apache-trusted-release/requirements.md @@ -15,11 +15,12 @@ While reading consider these Notes: ## 2. Community - - Work with a selection of **Apache** PMCs and **Infra** for **User Acceptance Testing (UAT)**. + - Work with a selection of **Apache** PMCs, **Incubator PPMCs(podlings)**, and **Infra** for **User Acceptance Testing (UAT)**. - Co-ordinate with **Infra** on migration to and operating this complex stack. - Contribute to Infra's **asfquart** and **asfpy** frameworks when the code belongs there. - Provide openings for volunteers to help so long as the contributions are adequate and timely. - - Assure that the **ATR platform** follows industry best practices especially regarding **SBOMs** and **Certificate Management**. + - Assure that the **ATR platform** follows industry best practices especially regarding **SBOMs**, + **Certificate Management**, and **Digital Signatures**. - Help lead the industry to better practices. - Work within the **ASF** on **Release Policy** improvements. @@ -38,6 +39,7 @@ While reading consider these Notes: - Platform includes a RESTful API. - Platform perfers to serve static content. - Make switching from current manual release process to a minimal ATR process very simple. + - System Admins (Infra) have a management interface. - Provide operational status to help Infra monitor ATR operations through the Infra Reporting Dashboard (IRD). See [Platform Services](./platform.md) for detailed requirements for the **ATR**. @@ -63,8 +65,10 @@ While reading consider these Notes: ## 6. Additional Requirements - Retire dist.apache.org svn repository once all 200+ PMCs having fully switched over to directly using the **ATR**. - - Map legacy urls for https://dist.apache.org, https://download.apache.org, and https://archive.apache.org to https://releases.apache.org + - Continue to support legacy urls for dist.apache.org, downloads.apache.org, dlcdn.apache.org, and archive.apache.org ## 7. Future Requirements - Integrate with the [Security Advisory Process](advisory-process.md) to make it easy to track applicable advisories on download pages. + - Expand support for [Evaluating Build Claims[(evaluate.md) to additional build tools. + - Expand automated support for additional [Distribution Channels](distributions.md). --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tooling.apache.org For additional commands, e-mail: dev-h...@tooling.apache.org