Merge branch 'main' into feat/controls-poc

finos · Jul 9, 2024 · 04d32eb · 04d32eb
2 parents 01c34d3 + f96d236
commit 04d32eb
Show file tree

Hide file tree

Showing 42 changed files with 1,644 additions and 145 deletions.
diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS
@@ -0,0 +1,66 @@
+########
+#
+# In the event that a file is not covered by policies below, the 
+# Community Structure WG should advise changes or create a new 
+# CODEOWNERS entry for it.
+#
+# NOTE: If the GitHub automated reviewers do not behave as expected,
+#       please contact the Community Structure WG.
+* @finos/ccc-wg-community-structure
+.github/CODEOWNERS @finos/ccc-wg-community-structure
+#
+########
+
+########
+#
+# Changes that might impact automation must be reviewed by the Delivery WG
+# Code owners should only be modified by the SteerCo
+.github @finos/ccc-wg-delivery
+.github/CODEOWNERS @finos/ccc-steerco
+#
+########
+
+########
+#
+# Community Guidelines only need review from the Community Structure WG
+docs/governance/community-guidelines @finos/ccc-wg-community-structure
+#
+########
+
+########
+#
+# Each WG may place ad hoc documentation in their governance subdirectory
+docs/governance/working-groups/communications @finos/ccc-wg-communications
+docs/governance/working-groups/community-structure @finos/ccc-wg-community-structure
+docs/governance/working-groups/delivery @finos/ccc-wg-delivery
+docs/governance/working-groups/duplication-reduction @finos/ccc-wg-duplication-reduction
+docs/governance/working-groups/security @finos/ccc-wg-security
+docs/governance/working-groups/taxonomy @finos/ccc-wg-taxonomy
+#
+########
+
+########
+#
+# Changes to the services directory must be reviewed by the Taxonomy WG
+# excluding threats and controls definitions
+services @finos/ccc-wg-taxonomy
+#
+########
+
+########
+#
+# Threats or controls definition changes must be reviewed by the Security WG
+**/threats.md @finos/ccc-wg-security
+**/controls.md @finos/ccc-wg-security
+#
+########
+
+########
+#
+# Charters and policies require review from at least one SteerCo member
+# Policies also require review from the Community Structure WG
+docs/governance/steering @finos/ccc-steerco
+docs/governance @finos/ccc-steerco @finos/ccc-wg-community-structure
+**/charter.md @finos/ccc-steerco
+#
+########
diff --git a/.github/ISSUE_TEMPLATE/bug_report.md b/.github/ISSUE_TEMPLATE/bug_report.md
diff --git a/.github/ISSUE_TEMPLATE/generic_issue_template.md b/.github/ISSUE_TEMPLATE/generic_issue_template.md
diff --git a/.github/ISSUE_TEMPLATE/minutes_all-hands-comms.md b/.github/ISSUE_TEMPLATE/minutes_all-hands-comms.md
@@ -0,0 +1,42 @@
+---
+
+name: All Hands (Communications WG) Meeting Minutes
+about: To track Common Cloud Controls meeting agenda and attendance
+title: MM/DD/YYYY All Hands Meeting Minutes
+labels: 
+  - meeting
+  - communications
+assignees: 'alexstpierrework'
+projects:
+  - finos/18
+---
+
+## Date
+
+MM/DD/YYYY - (X)am ET / (Y)pm UK
+
+- [Join Zoom Meeting](https://zoom.us/j/94416168360)
+- Meeting ID: 944 1616 8360
+- Passcode: 042805
+- [Find your local number](https://zoom.us/u/apjhwwA3K)
+- [Copy this meeting to your calendar](calendar.finos.org)
+
+## Meeting notices
+
+- FINOS **Project leads** are responsible for observing the FINOS guidelines for [running project meetings](https://community.finos.org/docs/governance/meeting-procedures/). Project maintainers can find additional resources in the [FINOS Maintainers Cheatsheet](https://community.finos.org/docs/finos-maintainers-cheatsheet).
+- **All participants** in FINOS project meetings are subject to the [LF Antitrust Policy](https://www.linuxfoundation.org/antitrust-policy/), the [FINOS Community Code of Conduct](https://community.finos.org/docs/governance/code-of-conduct) and all other [FINOS policies](https://community.finos.org/docs/governance/#policies).
+- FINOS meetings involve participation by industry competitors, and it is the intention of FINOS and the Linux Foundation to conduct all of its activities in accordance with applicable antitrust and competition laws. It is therefore extremely important that attendees adhere to meeting agendas, and be aware of, and not participate in, any activities that are prohibited under applicable US state, federal or foreign antitrust and competition laws. Please contact [email protected] with any questions.
+- FINOS project meetings may be recorded for use solely by the FINOS team for administration purposes. In very limited instances, and with explicit approval, recordings may be made more widely available.
+
+## Agenda
+- [ ] Convene & roll call (5mins)
+- [ ] Display [FINOS Antitrust Policy summary slide](https://community.finos.org/Compliance-Slides/Antitrust-Compliance-Slide.pdf) 
+- [ ] Review Meeting Notices (see above)
+- [ ] Approve past meeting minutes
+- [ ] [Project board](https://github.com/orgs/finos/projects/78/views/11) walkthrough
+- [ ] ...
+- [ ] AOB, Q&A & Adjourn (5mins)
+
+## Untracked attendees
+- Fullname, Affiliation, (optional) GitHub username
+- ...
diff --git a/...LATE/project-name-data-meeting-minutes.md → ...E_TEMPLATE/minutes_community-structure.md b/...LATE/project-name-data-meeting-minutes.md → ...E_TEMPLATE/minutes_community-structure.md
@@ -1,83 +1,41 @@
----
-name: Common Cloud Controls Meeting Minutes
-about: To track Common Cloud Controls meeting agenda and attendance
-title: MMDDYYYY Common Cloud Controls Meeting Minutes
-labels: meeting
-assignees: ''
-
 ---
 
----
-name: "\U0001F91DCommon Cloud Controls Meeting Minutes"
+name: Community Structure WG Meeting Minutes
 about: To track Common Cloud Controls meeting agenda and attendance
-title: MMM DD YYYY - Common Cloud Controls Meeting Minutes
-labels: Common Cloud Controls, meeting
-assignees: ''
+title: MM/DD/YYYY All Hands Meeting Minutes
+labels: 
+  - meeting
+  - community structure
+assignees: 'sshiells-scottlogic'
 
 ---
+
 ## Date
-YYYYMMDD - (X)am ET / (Y)pm UK
 
-## Untracked attendees
-- Fullname, Affiliation, (optional) GitHub username
-- ...
+MM/DD/YYYY - (X)am ET / (Y)pm UK
 
-## Meeting notices
-- FINOS **Project leads** are responsible for observing the FINOS guidelines for [running project meetings](https://community.finos.org/docs/governance/meeting-procedures/). Project maintainers can find additional resources in the [FINOS Maintainers Cheatsheet](https://community.finos.org/docs/finos-maintainers-cheatsheet).
+- [Join Zoom Meeting](https://zoom.us/j/99708793584)
+- Meeting ID: 997 0879 3584
+- Passcode: 718089
+- [Copy this meeting to your calendar](calendar.finos.org)
+- [Find your local number](https://zoom.us/u/abu2VMzm1v)
 
-- **All participants** in FINOS project meetings are subject to the [LF Antitrust Policy](https://www.linuxfoundation.org/antitrust-policy/), the [FINOS Community Code of Conduct](https://community.finos.org/docs/governance/code-of-conduct) and all other [FINOS policies](https://community.finos.org/docs/governance/#policies). 
+## Meeting notices
 
+- FINOS **Project leads** are responsible for observing the FINOS guidelines for [running project meetings](https://community.finos.org/docs/governance/meeting-procedures/). Project maintainers can find additional resources in the [FINOS Maintainers Cheatsheet](https://community.finos.org/docs/finos-maintainers-cheatsheet).
+- **All participants** in FINOS project meetings are subject to the [LF Antitrust Policy](https://www.linuxfoundation.org/antitrust-policy/), the [FINOS Community Code of Conduct](https://community.finos.org/docs/governance/code-of-conduct) and all other [FINOS policies](https://community.finos.org/docs/governance/#policies).
 - FINOS meetings involve participation by industry competitors, and it is the intention of FINOS and the Linux Foundation to conduct all of its activities in accordance with applicable antitrust and competition laws. It is therefore extremely important that attendees adhere to meeting agendas, and be aware of, and not participate in, any activities that are prohibited under applicable US state, federal or foreign antitrust and competition laws. Please contact [email protected] with any questions.
-
 - FINOS project meetings may be recorded for use solely by the FINOS team for administration purposes. In very limited instances, and with explicit approval, recordings may be made more widely available.
 
 ## Agenda
 - [ ] Convene & roll call (5mins)
 - [ ] Display [FINOS Antitrust Policy summary slide](https://community.finos.org/Compliance-Slides/Antitrust-Compliance-Slide.pdf) 
 - [ ] Review Meeting Notices (see above)
 - [ ] Approve past meeting minutes
-- [ ] [Project board](https://github.com/orgs/finos/projects/78/views/4) walkthrough (filter by WG label, start right to left)
+- [ ] [Project board](https://github.com/orgs/finos/projects/78/views/12) walkthrough
 - [ ] ...
 - [ ] AOB, Q&A & Adjourn (5mins)
 
-### Zoom info
-Join Zoom Meeting
-https://zoom.us/j/93861901920
-
-Meeting ID: 938 6190 1920
-Passcode: 284383
-
----
-
-Dial by your location
-• +1 719 359 4580 US
-• +1 253 205 0468 US
-• +1 253 215 8782 US (Tacoma)
-• +1 301 715 8592 US (Washington DC)
-• +1 305 224 1968 US
-• +1 309 205 3325 US
-• +1 312 626 6799 US (Chicago)
-• +1 346 248 7799 US (Houston)
-• +1 360 209 5623 US
-• +1 386 347 5053 US
-• +1 507 473 4847 US
-• +1 564 217 2000 US
-• +1 646 558 8656 US (New York)
-• +1 646 931 3860 US
-• +1 669 444 9171 US
-• +1 669 900 6833 US (San Jose)
-• +1 689 278 1000 US
-• 855 880 1246 US Toll-free
-• 877 369 0926 US Toll-free
-• +1 438 809 7799 Canada
-• +1 587 328 1099 Canada
-• +1 647 374 4685 Canada
-• +1 647 558 0588 Canada
-• +1 778 907 2071 Canada
-• +1 780 666 0144 Canada
-• +1 204 272 7920 Canada
-• 855 703 8985 Canada Toll-free
-
-Meeting ID: 938 6190 1920
-
-Find your local number: https://zoom.us/u/acPjHdY2IO
+## Untracked attendees
+- Fullname, Affiliation, (optional) GitHub username
+- ...
diff --git a/.github/ISSUE_TEMPLATE/minutes_delivery.md b/.github/ISSUE_TEMPLATE/minutes_delivery.md
@@ -0,0 +1,41 @@
+---
+
+name: Delivery WG Meeting Minutes
+about: To track Common Cloud Controls meeting agenda and attendance
+title: MM/DD/YYYY All Hands Meeting Minutes
+labels: 
+  - meeting
+  - delivery
+assignees: 'damienjburks'
+
+---
+
+## Date
+
+MM/DD/YYYY - (X)am ET / (Y)pm UK
+
+- [Join Zoom Meeting](https://zoom.us/j/93010138669)
+- Meeting ID: 930 1013 8669
+- Passcode: 432980
+- [Copy this meeting to your calendar](calendar.finos.org)
+- [Find your local number](https://zoom.us/u/aeflbEDu94)
+
+## Meeting notices
+
+- FINOS **Project leads** are responsible for observing the FINOS guidelines for [running project meetings](https://community.finos.org/docs/governance/meeting-procedures/). Project maintainers can find additional resources in the [FINOS Maintainers Cheatsheet](https://community.finos.org/docs/finos-maintainers-cheatsheet).
+- **All participants** in FINOS project meetings are subject to the [LF Antitrust Policy](https://www.linuxfoundation.org/antitrust-policy/), the [FINOS Community Code of Conduct](https://community.finos.org/docs/governance/code-of-conduct) and all other [FINOS policies](https://community.finos.org/docs/governance/#policies).
+- FINOS meetings involve participation by industry competitors, and it is the intention of FINOS and the Linux Foundation to conduct all of its activities in accordance with applicable antitrust and competition laws. It is therefore extremely important that attendees adhere to meeting agendas, and be aware of, and not participate in, any activities that are prohibited under applicable US state, federal or foreign antitrust and competition laws. Please contact [email protected] with any questions.
+- FINOS project meetings may be recorded for use solely by the FINOS team for administration purposes. In very limited instances, and with explicit approval, recordings may be made more widely available.
+
+## Agenda
+- [ ] Convene & roll call (5mins)
+- [ ] Display [FINOS Antitrust Policy summary slide](https://community.finos.org/Compliance-Slides/Antitrust-Compliance-Slide.pdf) 
+- [ ] Review Meeting Notices (see above)
+- [ ] Approve past meeting minutes
+- [ ] [Project board](https://github.com/orgs/finos/projects/78/views/8) walkthrough
+- [ ] ...
+- [ ] AOB, Q&A & Adjourn (5mins)
+
+## Untracked attendees
+- Fullname, Affiliation, (optional) GitHub username
+- ...
diff --git a/.github/ISSUE_TEMPLATE/minutes_duplication-reduction.md b/.github/ISSUE_TEMPLATE/minutes_duplication-reduction.md
@@ -0,0 +1,41 @@
+---
+
+name: Duplication Reduction WG Meeting Minutes
+about: To track Common Cloud Controls meeting agenda and attendance
+title: MM/DD/YYYY All Hands Meeting Minutes
+labels: 
+  - meeting
+  - duplication reduction
+assignees: 'jared-lambert'
+
+---
+
+## Date
+
+MM/DD/YYYY - (X)am ET / (Y)pm UK
+
+- [Join Zoom Meeting](https://zoom.us/j/94109603410)
+- Meeting ID: 941 0960 3410
+- Passcode: 353234
+- [Copy this meeting to your calendar](calendar.finos.org)
+- [Find your local number](https://zoom.us/u/ab9zAHYy5T)
+
+## Meeting notices
+
+- FINOS **Project leads** are responsible for observing the FINOS guidelines for [running project meetings](https://community.finos.org/docs/governance/meeting-procedures/). Project maintainers can find additional resources in the [FINOS Maintainers Cheatsheet](https://community.finos.org/docs/finos-maintainers-cheatsheet).
+- **All participants** in FINOS project meetings are subject to the [LF Antitrust Policy](https://www.linuxfoundation.org/antitrust-policy/), the [FINOS Community Code of Conduct](https://community.finos.org/docs/governance/code-of-conduct) and all other [FINOS policies](https://community.finos.org/docs/governance/#policies).
+- FINOS meetings involve participation by industry competitors, and it is the intention of FINOS and the Linux Foundation to conduct all of its activities in accordance with applicable antitrust and competition laws. It is therefore extremely important that attendees adhere to meeting agendas, and be aware of, and not participate in, any activities that are prohibited under applicable US state, federal or foreign antitrust and competition laws. Please contact [email protected] with any questions.
+- FINOS project meetings may be recorded for use solely by the FINOS team for administration purposes. In very limited instances, and with explicit approval, recordings may be made more widely available.
+
+## Agenda
+- [ ] Convene & roll call (5mins)
+- [ ] Display [FINOS Antitrust Policy summary slide](https://community.finos.org/Compliance-Slides/Antitrust-Compliance-Slide.pdf) 
+- [ ] Review Meeting Notices (see above)
+- [ ] Approve past meeting minutes
+- [ ] [Project board](https://github.com/orgs/finos/projects/78/views/13) walkthrough
+- [ ] ...
+- [ ] AOB, Q&A & Adjourn (5mins)
+
+## Untracked attendees
+- Fullname, Affiliation, (optional) GitHub username
+- ...
diff --git a/.github/ISSUE_TEMPLATE/minutes_security.md b/.github/ISSUE_TEMPLATE/minutes_security.md
@@ -0,0 +1,41 @@
+---
+
+name: Security WG Meeting Minutes
+about: To track Common Cloud Controls meeting agenda and attendance
+title: MM/DD/YYYY All Hands Meeting Minutes
+labels: 
+  - meeting
+  - security
+assignees: 'mlysaght2017'
+
+---
+
+## Date
+
+MM/DD/YYYY - (X)am ET / (Y)pm UK
+
+- [Join Zoom Meeting](https://zoom.us/j/99521272221)
+- Meeting ID: 995 2127 2221
+- Passcode: 128200
+- [Copy this meeting to your calendar](calendar.finos.org)
+- [Find your local number](https://zoom.us/u/aUVBvM9h)
+
+## Meeting notices
+
+- FINOS **Project leads** are responsible for observing the FINOS guidelines for [running project meetings](https://community.finos.org/docs/governance/meeting-procedures/). Project maintainers can find additional resources in the [FINOS Maintainers Cheatsheet](https://community.finos.org/docs/finos-maintainers-cheatsheet).
+- **All participants** in FINOS project meetings are subject to the [LF Antitrust Policy](https://www.linuxfoundation.org/antitrust-policy/), the [FINOS Community Code of Conduct](https://community.finos.org/docs/governance/code-of-conduct) and all other [FINOS policies](https://community.finos.org/docs/governance/#policies).
+- FINOS meetings involve participation by industry competitors, and it is the intention of FINOS and the Linux Foundation to conduct all of its activities in accordance with applicable antitrust and competition laws. It is therefore extremely important that attendees adhere to meeting agendas, and be aware of, and not participate in, any activities that are prohibited under applicable US state, federal or foreign antitrust and competition laws. Please contact [email protected] with any questions.
+- FINOS project meetings may be recorded for use solely by the FINOS team for administration purposes. In very limited instances, and with explicit approval, recordings may be made more widely available.
+
+## Agenda
+- [ ] Convene & roll call (5mins)
+- [ ] Display [FINOS Antitrust Policy summary slide](https://community.finos.org/Compliance-Slides/Antitrust-Compliance-Slide.pdf) 
+- [ ] Review Meeting Notices (see above)
+- [ ] Approve past meeting minutes
+- [ ] [Project board](https://github.com/orgs/finos/projects/78/views/7) walkthrough
+- [ ] ...
+- [ ] AOB, Q&A & Adjourn (5mins)
+
+## Untracked attendees
+- Fullname, Affiliation, (optional) GitHub username
+- ...