Hello Enrico, I'm one of the founders of Muse Dev. We built Muse bot to run deep static analysis on projects to sort of be another reviewer covering pull requests. The vision is to stay out of the way until and unless something worth saying pops up. Muse was bought by Sonatype and became Sonatype-lift. But still, how did this get on Zookeeper? We teamed up with Apache Foundation in a bug bash last year and ended up installed on many Apache projects. You might recall a couple emails we exchanged in September of last year.
I'm taking a guess that you were surprised to see the request for repository write access. I do wish github allowed us to pair these requests for more material, but also understand the cut and dry nature protects projects from being misled. To the point - we requested write access because of a new feature that allows tools to create new branches and open pull requests. With this feature we're supporting tools including binary disassembly, source-to-source rewrites, and good old fashion bug fixing. There's no requirement that you accept these new permissions - all the prior operations will function unimpeded without push permissions being granted. If you have any questions then please feel free to reach out here or directly. Cheers, Tom On Fri, Jul 16, 2021 at 7:37 AM Enrico Olivelli <[email protected]> wrote: > Hello, > I just realized that our PRs are validated but this Sonatype Lift bot > > https://lift.sonatype.com/result/apache/zookeeper/01FAQV80GRR1RCTP3RGBENCVDF > > I found this link in my PR > https://github.com/apache/zookeeper/pull/1724 > > Did I miss some discussion about this new bot ? > > Who activated it ? and how ? > > Enrico >
