Audit preparation: Change Mgt

[aschemmel-tech]

"not started" topics:

• Change requests
• Change request analysis
• Change request evaluation

Actions and Deviations:

• Action_47: Evidence missing that "A contributor cannot approve his own change request" applies to all roles. - for github there is only the committer role: show it's not allowed for a PR example
  https://github.com/eclipse-score/score/blob/main/.github/CODEOWNERS is now defined, requiring review according workflows
• Deviation_17: The Impact Analysis on Element Level is not defined by the process definition. It shall be identified which ISO 26262 work products are affected by the change.
  Defined now in the https://github.com/eclipse-score/score/blob/main/.github/ISSUE_TEMPLATE/3-change.yml Templates
• Deviation_18: To define that the committer is a competent person because he got training for 16h or got any training by a Safety Person will not guarantee an adequate level of safety knowledge to fulfill the responsibilities. Several years of professional safety projects experience with evidence shall be required.
  Update in role description, election process with competence review started here
  update safety manager roles score#2290