You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is your feature request related to a problem? Please describe.
Currently, the path for Scorecard Triagers is a bit vague and unstructured. The following excerpt from CONTRIBUTOR_LADDER.md describes the responsibilities as such:
- Read through issues and PRs
- Answer questions when possible
- Add relevant labels
- Draw maintainers' attention (via `@mention`) if relevant
- Close issue (as "completed" or "not planned") if necessary
- Help maintain project quality control via [code reviews] on PRs
- Focus on code quality and correctness, including testing and factoring
- May also review for more holistic issues, but not a requirement
- Be responsive to review requests
- May be assigned PRs to review if in area of expertise
- Assigned test bugs related to the project of expertise
There are a few issues with this:
No real guidelines or process exists for issue backlog refinement / triaging. There have been prior community efforts to triage the issues in most need of refinement, and maintainers will comment on / address issues as they're able, but this often yields inconsistent results and duplicated efforts.
It's difficult for triagers to know which maintainers are a) actively contributing to the codebase, b) have relevant expertise in a particular Scorecard domain, c) have direct knowledge of planned future work for Scorecard. The CODEOWNERS file references ossf/scorecard-maintainers, which corresponds to MAINTAINERS, but there's little else to go on besides using git blame or browsing PR / commit history to discern authorship.
The default contributor ladder path assumes that the trajectory will always be triager -> contributor -> maintainer. For non-code contributors, there is little room to grow and contribute more meaningfully to Scorecard by way of technical documentation, product or project management, etc.
Describe the solution you'd like
An updated contributor ladder which adds more explicit clarity to the Triager responsibilities, including guidance or concrete examples for issue triaging / backlog refinement, and a better process for @mentioning specific Scorecard maintainers.
An expanded or alternate contributor ladder path to be created in direct support of non-code contributions.
Additional context
This was discussed at the Scorecard community meeting on 09/05/24.
Is your feature request related to a problem? Please describe.
Currently, the path for Scorecard Triagers is a bit vague and unstructured. The following excerpt from
CONTRIBUTOR_LADDER.md
describes the responsibilities as such:There are a few issues with this:
ossf/scorecard-maintainers
, which corresponds to MAINTAINERS, but there's little else to go on besides usinggit blame
or browsing PR / commit history to discern authorship.Describe the solution you'd like
Additional context
This was discussed at the Scorecard community meeting on 09/05/24.
cc: @hsutor
The text was updated successfully, but these errors were encountered: