This document provides a checklist and recommended actionable items before donating Ratify to CNCF based on the CNCF Sandbox submission form.
The next CNCF Sandbox project review meeting is April 9, 2024. We need to make sure all required information and process are completed by that date.
Application contact emails
Project Summary
Org repo URL (provide if all repos under the org are in scope of the application): we will need to create a new organization for Ratify and migrate two repos to the new org
Project repo URL in scope of application
Website URL
Roadmap: it would be better to create a document to clarify the short-term and long-term plans for the roadmap. Make others quickly understand the vision and goalds of the project
Contributing Guide: https://github.com/deislabs/ratify/blob/main/CONTRIBUTING.md
Code of Conduct (CoC): need to change from Microsoft Open Source Code of Conduct to CNCF CoC
Adopters: need to increase the adoption and collect the adopter information to justify the project values and user scenarios, finally create a Adoters.md document to list all known adopters
Contributing or Sponsoring Org: Microsoft. Maybe we can ask whether AWS has any interest in joining the project as the contributing org
Maintainers file: Ratify has a MAINTAINERS file but need to update the maintainer seats based on contributor metrics
IP Policy
Trademark and accounts
Why CNCF: need to explain the motivation and vision of donating Ratify to CNCF
Benefit to the Landscape: Create a PR to add Ratify to https://landscape.cncf.io/, clarify the project benefits and values to cloud-native ecosystem, as well as integration with others
Project presentations: Suggest presenting the project in CNCF Security TAG and collect their feedback from TAG chairs
Project champions: Need to find 2 people from CNCF TOC and TAG to recommend us