Tracking of code ownership and access control

[rochaporto]

As part of the incubation DD process for the Lima project in the CNCF, can you clarify how code ownership is controlled and if a mechanism similar to code owners is being applied?
https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners

If not would you consider adding such a mechanism?

[jandubois]

If not would you consider adding such a mechanism?

We discussed this before and decided that we would postpone this until we have more committers on the project. Right now only 4 maintainers have write access to the repo, so for practical reasons all 4 would be a codeowner of the full repo, which makes the whole process somewhat pointless.

[rochaporto]

That's fair. But given the goal of our due diligence is to guide projects towards maturity (graduation later) it seems like a good item to add now.

"Code and Doc ownership in Github and elsewhere matches documented governance roles" is a required item for the incubation due diligence. From the governance docs you have both "Committers" and "Reviewers" as maintainer roles, reflecting this in some form other than full write access to the repo seems like a good target.

[jandubois]

it seems like a good item to add now

Yeah, we can of course add the CODEOWNERS file and give each committer full ownership for the repo for now, so we have the structure in place, even though it won't make a difference just yet.