LF / CNCF Tasks to complete #547

Closed
opened 2026-03-28 04:25:35 +00:00 by mfreeman451 · 4 comments
Owner

Imported from GitHub.

Original GitHub issue: #1731
Original author: @marvin-hansen
Original URL: https://github.com/carverauto/serviceradar/issues/1731
Original created: 2025-10-09T07:55:40Z


Following the initial assessment,
the ServiceRadar repo is in overall good shape, most repo lints pass, and only very few gap need to be closed:

Complete and get the OpenSSF Best Practices Badge - Mandatory

https://www.bestpractices.dev/en

Note, this follows the recommended template:

/*
SPDX-License-Identifier: OSI-LICENSE

  • Copyright (c) "2025" . The Project Authors and Contributors. All Rights Reserved.
    */

It is best to setup up the Copyright template in JetBrains, and then right click in the root source tree and select update copyright to get this out of the way

Move the project to its own GH org - Mandatory

The LF requires admin access to GH org mainly to ensure they have access in case of an accident or any other unplanned events. In my project, the assigned LF team is totally hands off, but in case I were to fall into a Volcano, they could step in.

This issue will be updated over time with specifics for CNCF as I am learn these.

License

The current Apache License, Version 2.0 is OSI approved, so no change required.
https://opensource.org/license/apache-2-0

The compatibility of all deps licenses is an open topic to be investigated.

Imported from GitHub. Original GitHub issue: #1731 Original author: @marvin-hansen Original URL: https://github.com/carverauto/serviceradar/issues/1731 Original created: 2025-10-09T07:55:40Z --- Following the initial assessment, the ServiceRadar repo is in overall good shape, most repo lints pass, and only very few gap need to be closed: ## Complete and get the OpenSSF Best Practices Badge - Mandatory https://www.bestpractices.dev/en ## Update all files with proper copyright and SPDX-License-Identifier - Mandatory Note, this follows the recommended template: /* SPDX-License-Identifier: OSI-LICENSE * Copyright (c) "2025" . The Project Authors and Contributors. All Rights Reserved. */ It is best to setup up the Copyright template in JetBrains, and then right click in the root source tree and select update copyright to get this out of the way ## Move the project to its own GH org - Mandatory The LF requires admin access to GH org mainly to ensure they have access in case of an accident or any other unplanned events. In my project, the assigned LF team is totally hands off, but in case I were to fall into a Volcano, they could step in. This issue will be updated over time with specifics for CNCF as I am learn these. ## License The current Apache License, Version 2.0 is OSI approved, so no change required. https://opensource.org/license/apache-2-0 The compatibility of all deps licenses is an open topic to be investigated.
Author
Owner

Imported GitHub comment.

Original author: @marvin-hansen
Original URL: https://github.com/carverauto/serviceradar/issues/1731#issuecomment-3384689916
Original created: 2025-10-09T08:17:58Z


CLA is in place. so DCO is off the list. One less to work on.

Imported GitHub comment. Original author: @marvin-hansen Original URL: https://github.com/carverauto/serviceradar/issues/1731#issuecomment-3384689916 Original created: 2025-10-09T08:17:58Z --- CLA is in place. so DCO is off the list. One less to work on.
Author
Owner

Imported GitHub comment.

Original author: @mfreeman451
Original URL: https://github.com/carverauto/serviceradar/issues/1731#issuecomment-3386201144
Original created: 2025-10-09T14:47:40Z


Will work on this bit shortly

/*
SPDX-License-Identifier: OSI-LICENSE

Copyright (c) "2025" . The Project Authors and Contributors. All Rights Reserved.
*/
It is best to setup up the Copyright template in JetBrains, and then right click in the root source tree and select update copyright to get this out of the way
Imported GitHub comment. Original author: @mfreeman451 Original URL: https://github.com/carverauto/serviceradar/issues/1731#issuecomment-3386201144 Original created: 2025-10-09T14:47:40Z --- Will work on this bit shortly ``` /* SPDX-License-Identifier: OSI-LICENSE Copyright (c) "2025" . The Project Authors and Contributors. All Rights Reserved. */ It is best to setup up the Copyright template in JetBrains, and then right click in the root source tree and select update copyright to get this out of the way ```
Author
Owner

Imported GitHub comment.

Original author: @marvin-hansen
Original URL: https://github.com/carverauto/serviceradar/issues/1731#issuecomment-3410197565
Original created: 2025-10-16T10:24:24Z


last remainign tasks:

  1. Get the OpenSSF badge and add it to the Readme. OpenSSF is largely self-declaration so basically a bunch of questions to answer.

https://www.bestpractices.dev/en

Example:
https://www.bestpractices.dev/en/projects/7568

  1. Setup FOSA licence scan to cover all deps.

https://fossa.com/products/scan

Imported GitHub comment. Original author: @marvin-hansen Original URL: https://github.com/carverauto/serviceradar/issues/1731#issuecomment-3410197565 Original created: 2025-10-16T10:24:24Z --- last remainign tasks: 1) Get the OpenSSF badge and add it to the Readme. OpenSSF is largely self-declaration so basically a bunch of questions to answer. https://www.bestpractices.dev/en Example: https://www.bestpractices.dev/en/projects/7568 2) Setup FOSA licence scan to cover all deps. https://fossa.com/products/scan
Author
Owner

Imported GitHub comment.

Original author: @marvin-hansen
Original URL: https://github.com/carverauto/serviceradar/issues/1731#issuecomment-3413751776
Original created: 2025-10-17T03:59:10Z


Close this issue now as the bulk of CNCF preparations have been completed.

Imported GitHub comment. Original author: @marvin-hansen Original URL: https://github.com/carverauto/serviceradar/issues/1731#issuecomment-3413751776 Original created: 2025-10-17T03:59:10Z --- Close this issue now as the bulk of CNCF preparations have been completed.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
carverauto/serviceradar#547
No description provided.