This is an automated email from the ASF dual-hosted git repository.
wave pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tooling-docs.git
The following commit(s) were added to refs/heads/main by this push:
new 715c9ee Various Requirement Adjustments
715c9ee is described below
commit 715c9eedd09e70e65f3ee4e703425542ead3830b
Author: Dave Fisher <[email protected]>
AuthorDate: Wed Feb 5 12:07:12 2025 -0800
Various Requirement Adjustments
---
apache-trusted-release/requirements.md | 10 +++++++---
1 file changed, 7 insertions(+), 3 deletions(-)
diff --git a/apache-trusted-release/requirements.md
b/apache-trusted-release/requirements.md
index 1d588a2..cede365 100644
--- a/apache-trusted-release/requirements.md
+++ b/apache-trusted-release/requirements.md
@@ -15,11 +15,12 @@ While reading consider these Notes:
## 2. Community
- - Work with a selection of **Apache** PMCs and **Infra** for **User
Acceptance Testing (UAT)**.
+ - Work with a selection of **Apache** PMCs, **Incubator PPMCs(podlings)**,
and **Infra** for **User Acceptance Testing (UAT)**.
- Co-ordinate with **Infra** on migration to and operating this complex
stack.
- Contribute to Infra's **asfquart** and **asfpy** frameworks when the code
belongs there.
- Provide openings for volunteers to help so long as the contributions are
adequate and timely.
- - Assure that the **ATR platform** follows industry best practices
especially regarding **SBOMs** and **Certificate Management**.
+ - Assure that the **ATR platform** follows industry best practices
especially regarding **SBOMs**,
+ **Certificate Management**, and **Digital Signatures**.
- Help lead the industry to better practices.
- Work within the **ASF** on **Release Policy** improvements.
@@ -38,6 +39,7 @@ While reading consider these Notes:
- Platform includes a RESTful API.
- Platform perfers to serve static content.
- Make switching from current manual release process to a minimal ATR
process very simple.
+ - System Admins (Infra) have a management interface.
- Provide operational status to help Infra monitor ATR operations through
the Infra Reporting Dashboard (IRD).
See [Platform Services](./platform.md) for detailed requirements for the
**ATR**.
@@ -63,8 +65,10 @@ While reading consider these Notes:
## 6. Additional Requirements
- Retire dist.apache.org svn repository once all 200+ PMCs having fully
switched over to directly using the **ATR**.
- - Map legacy urls for https://dist.apache.org, https://download.apache.org,
and https://archive.apache.org to https://releases.apache.org
+ - Continue to support legacy urls for dist.apache.org,
downloads.apache.org, dlcdn.apache.org, and archive.apache.org
## 7. Future Requirements
- Integrate with the [Security Advisory Process](advisory-process.md) to
make it easy to track applicable advisories on download pages.
+ - Expand support for [Evaluating Build Claims[(evaluate.md) to additional
build tools.
+ - Expand automated support for additional [Distribution
Channels](distributions.md).
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
