Ratify donation proposal

This document provides a checklist and recommended actionable items before donating Ratify to CNCF based on the CNCF Sandbox submission form.

The next CNCF Sandbox project review meeting is April 9, 2024. We need to make sure all required information and process are completed by that date.

• Application contact emails

• Project Summary

• Org repo URL (provide if all repos under the org are in scope of the application): we will need to create a new organization for Ratify and migrate two repos to the new org

• Project repo URL in scope of application

• Website URL

• Roadmap: it would be better to create a document to clarify the short-term and long-term plans for the roadmap. Make others quickly understand the vision and goalds of the project

• Contributing Guide: https://github.com/deislabs/ratify/blob/main/CONTRIBUTING.md

• Code of Conduct (CoC): need to change from Microsoft Open Source Code of Conduct to CNCF CoC

• Adopters: need to increase the adoption and collect the adopter information to justify the project values and user scenarios, finally create a Adoters.md document to list all known adopters

• Contributing or Sponsoring Org: Microsoft. Maybe we can ask whether AWS has any interest in joining the project as the contributing org

• Maintainers file: Ratify has a MAINTAINERS file but need to update the maintainer seats based on contributor metrics

• IP Policy

• Trademark and accounts

• Why CNCF: need to explain the motivation and vision of donating Ratify to CNCF

• Benefit to the Landscape: Create a PR to add Ratify to https://landscape.cncf.io/, clarify the project benefits and values to cloud-native ecosystem, as well as integration with others

• Project presentations: Suggest presenting the project in CNCF Security TAG and collect their feedback from TAG chairs

• Project champions: Need to find 2 people from CNCF TOC and TAG to recommend us