►
Description
Meeting notes: https://docs.google.com/document/d/1ttqkcYPmYZyqvtkaHs92bx2UeVUiXDhuzP-0WbP11Fw/edit#heading=h.7o2ubzl5z39r
A
B
Just
wanted
to
make
sure
you
weren't,
you
were
you
weren't
yeah
I
was
just
saying.
If
you
were
speaking
I
can't
I
couldn't
hear
you.
B
So
yeah
I,
we
can
go
through
it
in
a
little
bit,
but
I
I
took
some
of
your
text
and
I
tried
to
integrate
it
into
the
readme
file,
and
I
can
present
that
work
and
okay.
Something
like
that.
So.
A
B
B
B
Okay,
I
set
that
up,
so
we
can
so
so
we
have
a
section
up
at
the
top
of
the
working
group
notes
DOC
for
2023
with.
A
B
A
B
B
Well,
we
could
just
get
started
and
maybe
we
can
have
a
short
call
or
just
to
kind
of
establish
where
we're
at
basically
so
I
was
feeling
like
I
was
a
little
lost
and
a
little
stalled,
and
then
I
went
back
and
I
looked
at
our
notes
and
I
decided
to
just
take
a
crack
at
at
coming
up
with
a
a
thing
that
might
satisfy
all
the
different
concerns
right
so
like
there's,
the
original
Source
material
of
from
legitify
there's
the
material
Christine
that
you
pres,
that
you
kind
of
put
into
this
or
you
know,
contributed
via
this
kind
of
Google
doc
right,
which
is
very
specific
to
GitHub
and
also
very
specific
to
your
operations.
B
Well,
you
know
it's
not
it's!
It's
it's
yeah!
It's!
But
it's
anyway!
It's
it's,
but
that's
that's
there
and
then
there's
the
kind
of
like
organization
that
we
came
up
with
in
the
in
the
discussions
about
how
to
how
to
organize
these
things
into
different
categories
and
and
so
I
took
the
the
markdown
thing
and
I
committed.
C
B
Into
well
into
a
branch
here,
whatever
turbo
patch
one
and
just
to
give
a
kind
of
flavor
of
what
I
think
this
could
look
like
if
we
go
this
way
where
so
we
have
like
you
know
what
developers
would
would
come
to
they.
Oh
they're
they're,
coming
to
us
here,
we're
at
The,
Source,
Credit,
Management,
best
practices,
I
wonder
what
the
source
code
management
practices
has
and
then
you
know
they
would
come
to.
B
Is
this.
This
is
wrong.
B
That's
all
right,
never
mind!
I!
No
I
was
confused,
okay
having
a
brain
problem.
So
anyway
they
they
would.
B
It
would
come
to
here,
and
they
would,
you
know,
come
to
SCM
best
practices,
and
here
they
would
see
the
you
know
more
like
a
document
that
would
have
an
intro
and
then
a
set
of
recommendations,
and
they
could
choose
to
either
view
the
set
of
recommendations
as
one
list
which
would
be
split
between
GitHub
and
gitlab,
using
a
visual
cue
of
having
an
icon
next
to
each
one
saying
which
it
was
applicable
to
and
then
that
icon
being
clickable.
B
B
Are
actually
clickable
because
I,
because
I've
been
doing
it
by
hand,
and
that
goes
to
the
gitlab
version
of
the
same
best
practices
with
this
with
the
remediation
that's
specific
to
gitlab
right
that
way,
we
could
continue
to
have
so
so
we
continue
to
keep
all
of
the
best
practices
themselves
in
split
up
into
separate
files,
and
it
struck
me
that
that
would
also
be
a
good
way
to
make
those
best
practices
individually,
useful
by
keeping
them
as
separate
markdown
files
that
are
generated
out
of
the
legitified
data,
because
that
way
like,
for
instance,
we
were,
we
were
talking,
and
we
have
a
separate
call
set
up
with
the
scorecard
folks
to
talk
about
how
this
state
you
know
when,
if
scorecard
starts
to
talk
about
remediation
stuff,
it
could
click
sorry,
it
could
link
to
the
specific
file
that
is,
that
is
applicable
from
the
source
code
management,
best
practices
as
part
of
the
output.
B
Basically,
so
so
that's
another
way
for
for
that
data
to
be
consumed.
Besides
link,
you
know
clicking
through
from
one
of
these
pages
and
then
the
other
thought
that
I
had
was
well.
We
can
have
this
presentation
of
the
of
the
and,
by
the
way,
I've
included.
Some
of
the
material
that
I've
included
in
here
is
is
pulled
from
Christine's
documents.
So
that's
where,
if
we
need
some
intro
material
with
some
more
General
recommendations
that
would
that's
coming
through
from
Christine's
document,
I've
reworded
it
to
be
genericized.
B
So
it's
not
talking
about
GitHub,
but
it's
just
talking
about
organizations
and
then
prevent
specific
recommendations
are
the
links
through
to
the
to
the
legitified
data.
But
if,
if
somebody
wants
to
come
in
and
I
want,
you
know
what
I
don't
care
about.
Your
editorialization
of
this
I
want
to
know
what
your
recommendations
are
for
GitHub
then-
and
this
is
just
a
sample
list
like
this-
would
be
the
this
would
be
everything
actually
but
I've.
B
Only
I've
just
put
this
here
as
a
as
a
indicator
of
what
it
could
look
like.
We
just
have
the
list
of
best
practices
and
then-
and
then
you
know
here
we
can
link
through
to
the
one
that's
specific
to
GitHub
and
you
go
over
to
gitlab.
Do
you
see
all
the
all
the
ones
that
are
applicable
to
only
to
gitlab
and
then
you
click
through
and
you
see
the
gitlab
specific
recommendation.
B
And
then
the
other
thing
I
did
is
I
took
some
of
the
operations
stuff
that
was
coming
out
of
your
document
Christine
because
I,
because
we
were
speaking
about
that
last
week
or
not
last
week,
but
the
last
time
we
had
a
call
and
we
talked
about
the
need
for
an
operations
section
that
specifically
addresses
the
needs
of
P
of
of
of
of
operators
or
or
of
as
it
says
here,
ospo
or
operations
team
responsible.
But
this
is
this-
is
lifted
directly
from
your
document.
B
So
it
it
talks
a
lot
about
GitHub
and
probably
we
need
to
just
figure
out
either
we
genericize
it
or
we
split
it
up
into
GitHub
operation,
section
gitlab,
operation,
section
or
or
we
just
say
this
is
only
applicable
to
give
I
don't
know
we
need
to
talk
about
kind
of
editorially.
What
we
want
to
do
there
so
anyway,
that
that's
kind
of
my.
D
A
Nice
wow,
like
a
lot
of
that's
a
lot
of
a
lot
of
work
there.
Thank
you,
yeah
and
I.
Think
even
like
the
thought
that
you
said
just
going
on
the
theme
that
you've
done
with
the
GitHub
and
the
git
lab
even
to
the
operations
could
do
the
same
thing.
Little
icons
and
specific
sections
related
to
operations,
yeah.
B
Yeah
and
we
can
like,
we
can
revise,
and
this
allows
us
by
having
them
in
separate
things
and
Sarah
you
separate
files.
We
can
revise
the
table
of
contents
or
the
different
tables
of
contents,
depending
on
how
you
want
to
look
at
the
data
separately
from
the
actual,
like
recommendations
and
Remediation
steps
that
are
coming
directly
out
of
legitify.
We
don't
have
to
worry
about,
like
you
know,
inlining
all
of
that
stuff.
So
anyway,.
C
B
I
I
feel
like
that,
might
be
a
better
approach
and
and
really
help
us
just
because
then
all
that
stuff
from
legitify
can
be
re
regenerated
as
long
as
it
keeps
the
same
file,
names
right
and,
and
actually
this
material
can
be.
Some
of
this
material
can
be
generated
as
well.
B
What
I
was
hoping
that
gnome
might
be
able
to
take
this
as
a
template
and
generate
some
of
the
the
the
lists
so
that
we
don't
have
to
you
know
generate
because
because
the
markdown
for
this
is
actually
quite
complex,
especially
when
you
include
SVG
icons
and
you
want
to
size
them
at
a
certain
size,
it's
not,
it
doesn't
look
pretty
so
I
was
like.
How
do
you
do
this
again,
Google
or
DuckDuckGo?
You
know
markdown,
how
do
you
size
svgs,
oh
yeah,
okay,
anyway,
that's.
D
Thank
you,
Dan
I
think
this
looks
great
I
love
this
approach
and
I
love.
The
fact
that
you
were
thinking
about
integrating
with
scorecard
I
think
that's
going
to
be
a
big
big
win.
Awesome
ideas
could
work
good
work
to
the
team,
but
yeah.
Thank
you
for
synthesizing.
This
I
think
I
feel
this
is
a
good
direction
to
take.
It.
A
B
B
B
And
yeah
and
then
create
different
iconography
and
a
new
and
a
new
kind
of
readme
page.
That
would
that
would.
D
So
my
only
reservation
is,
it
looks
like
it
took
a
lot
of
work
to
get
it
to
this
stage.
What
do
you,
what
does
the
ongoing
maintenance
of
this
look
like?
If
there's
new
things
we
need
to
add
or
change?
Well,.
B
That's
the
thing
I
was
thinking
that
most
of
these
things
can
be
most
of
these
lists.
These
bulleted
lists
can
be
auto-generated
right.
Okay,
so
if
we
take
a
look
at
the
at
the
at
the
code
here.
B
Yeah,
so
you
know
it's
basically
just
this
is
the
you
know
the
heading
and
then
there's
all
of
this
probably
go
to
actually
insert
the
you
have
to
actually
insert
the
image
using
an
HTML
tag
in
order
to
size
it
correctly.
B
But
then,
then,
with
a
you
know,
with
a
link
to
to
the
to
to
the
dot
to
the
file
relative
link
right
because
you
want
it
to
work,
no
matter
where
it
is
and
the
so
all
of
that
stuff
can
actually
be
auto-generated
as
long
as
there's
data
that
legit,
if
I
have
that,
tell
it
which
things
should
appear
in
which
sections
and
I
think
we
do
have
that
that
that
is
the
data
that
was
in
that
spreadsheet,
that
gnome
produced
right.
A
B
Right
so
at
some
point,
there's
a
there's
there's
a
script
that
gnome
has,
or
one
of
his
colleagues
has
created-
that
takes
that
and
splits
it
up
into
all
these
different
markdown
files
and
and
I
guess
all
I'm
saying
is
that
some
of
this
can
be
auto-generated.
Then
we
just
need.
Maybe
we
need
to
when
it's
when
those
things
are
auto-generated,
we
can
either
have
one
manual
step
of
okay.
B
Now
that
these
lists
have
been
auto-generated,
we
can
insert
them
into
the
into
the
readme
file,
or
we
could
even
do
some
kind
of
you
know
naughty
templating
thing
where
we
say:
okay,
you
know
the
readme
template
has
a
little
meta
tag.
That
says
this
is
where
the
list
goes,
and
then
the
the
markdown
generator
knows
that
and
can
and
can
replace
it
with
the
with
the
with
the
lists,
but
it
doesn't
need.
You
know
that
that
that
that
was
a
factor
on
my
mind.
B
B
B
You
can
you
can
so
that
that
would
be
my
preference.
You
know
that
that
yeah
and
then
ideally
the
script
that
generates
all
that
stuff
could
actually
be
checked
in
to
this.
B
Check
out
the
repo
or
check
out
this
directory,
you
know
run
that
script,
and
maybe
it's
I,
don't
know,
I,
don't
know
what
it
is
python,
something
like
that
anyway,
it
would
just
have
it
do
that
yeah
I
think
I.
A
A
Yeah
I
think
having
the
script
checked
in
would
be
really
great
because,
if
you're
a
particular
company-
and
maybe
you
want
to
have
your
own
severity
or
whatever
it
is
that
you
want
your
own
settings,
you
can
generate
that
and
then
and
then
have
that
for
your
team
locally.
B
Right
so
I
guess
some
actions
are:
can
we
get
the
script
checked
into
the
directory?
You
know:
how
do
we,
how
do
we
Auto?
How
do
we
best
I,
don't
know
generate
the
lists
in
the
three
readme.
B
B
B
Now,
in
that
discussion
and
and
then
yeah,
maybe
Christine
I
was
going
to
ask
you
if
you
would.
A
A
B
B
So
what
I
was
so
I
think
it
needs
a
little
bit
of
editorial
in
terms
of
like
adapting
some
of
the
material.
That's
in
your
document
into
into
heading
into
edit
sorry
into
intro
sections
of
each
subsection
that,
and
you
know
that
that
would
be
appropriate
and
not
restate
that
doesn't
restate
the
these
things.
You
know
yeah.
B
What
I
could
do
is
so
if
you're
happy
with
this,
then
I
can
like
Commit,
This
or
I
can
make
a
pull
request
of
this
branch
and
we
can
actually
start
working
on
it.
Okay,
so
I'll
make
a
pull
request
and
Chrome.
Maybe,
as
you
know,.
B
D
So
thinking
about
kind
of
holistically
about
this
project,
approximately
how
far
along
towards
complete,
do
you
think
we
are?
It
feels
like
just
my
observation
about
three
quarters
of
the
way
done.
We
have
some
polishing
we
like
to
get
the
scripts
and
some
editorialization
is
that
kind
of
pretty
accurate
I.
D
A
Yeah,
so,
even
before
we
started
this,
this
collaboration,
hi
Randall,
even
before
we
started
this
collaboration,
I,
had
to
put
in
like
a
talk,
broken
Source
Summit
in
North,
America
or
just
to
get
ahead
of
it,
because
I
knew
we
were
going
to
be
working
with
GitHub
management
and
it
seemed
like
an
interesting
topic
so
fortuitously.
It
seems
like
this.
This
collaboration
formed
up
and
I
think
it
might
be
like
a
great
opportunity
to
to
definitely
tie
in
that
work
and
talk
about
what's
been
going
there
as
well.
So
you.
A
B
D
B
Enough
because
the
the
problem,
the
problem
that
I
have
is
with
and
like-
theoretically,
yes,
but
next
next
week,
we're
not
meeting
and
the
week
after
that,
I'm
gonna
actually
be
in
Japan.
So
for
some
reason.
B
So
I'm
gonna
stop
sharing,
so
we
can
talk
to
each
other
properly,
the
so
I
think.
Theoretically,
we
could
be
ready.
We
could
have
something
better
for
that,
but
I'm
not
going
to
be
here
for
the
week
that
we're
scheduled
to
have
a
meeting.
We
could
do
a
special
meeting
next
week.
B
D
Maybe
we
can
reach
out
to
him
on
slack
and
email
and
say:
hey
we'd
like
to
have
a
special
call:
can
you
make
it
and
it
doesn't
have
to
be
this
time
we
can.
You
can
reuse
the
zoom
link
to
have
to
hold
the
meeting
and
all
the
plumbings
in
place
so
it'll
get
recorded,
so
you
could
just
you
could
if
he
wants
to
meet
an
hour
before
this
time
on
a
Tuesday.
You
know
that
that's
an
option:
okay,
but
I.
D
D
I
think
this
is
going
to
be
a
very
useful
work.
Product
I
think
there's
going
to
be
a
lot
of
value
in
this,
so
I
I
would
like
to
you
know,
highlight
your
all
your
work.
A
D
And
they're
on
the
board-
I,
just
don't
I,
haven't
seen
him
participate
in
our
groups
in
a
while
I
can
try
to
track
down
some
folks
from
gitlab
and
maybe
have
them
review.
Yes,.
A
D
B
D
D
A
Yes,
yes,
yeah
and
there's
some
like
nuances
there,
like,
for
example,
coming
back
to
your
point
Dan.
You
know
that
GitHub
is
now
going
to
make
a
multi-factor
2fa
mandatory
by
the
end
of
the
year.
Like
you
know,
it's
almost
like
that
recommendation
is
like
sort
of
mood
at
that
point
because
you
have
to
yeah,
but
I
guess
you.
A
D
Well
and
maybe
like
to
that
point,
there's
a
couple
other
efforts
around
the
foundation
that
are
talking
about
MFA.
So
maybe
we
reach
back
out
to
GitHub
and
Google
to
see
if
they're
interested
in
doing
another
round
of
MFA
giveaways.
D
D
Absolutely
yeah
everybody's
welcome,
but
this
is
kind
of
what
we
what
we've
got
so
who's
shown
up
so
far.
D
And
if
you
had
that
Jeffrey,
if
you
were
aware
of
any
other
big
repos
or
you
had
contacts
there,
pass
them
along
and
we'll
reach
out
and
invite
them
to
kind
of
collaborate
on
this
yeah.
D
D
C
D
D
And
we'll
we'll
kind
of
hold
that
in
our
back
pocket.
You
know
that
won't
be
a
driver,
but
you
know
if,
if
it's
done
and
ready,
we
will
tell
Jennifer
and
get
it
out
during
that
week.
Otherwise,
if
it
goes
out
afterwards,
that's
fine.
A
A
B
All
right
so
Christine.
What
do
you
think
you're?
Do
you
think
that
sorry,
so
yes,
you're
gonna,
you're
gonna
talk
about
this?
Okay?
Yes,.
A
B
B
Okay,
so
I
reached
out
to
Norman
slack
and
then
hopefully
we
can.
Hopefully
we
can
meet
next
week
and
and
and
progress.
Okay,.
A
B
A
So
I'll
aim
to
try
to
get
a
a
patch
or
a
pull
request
in
with
the
additions
based
on
what
we
talked
about
right.
D
A
D
B
A
B
With
that
or
we
can,
we
can
invoke
you
if
we
need
to
crap.
A
B
D
D
B
Hard
best
practices
working
group
sync
on
the
13th
at
well
I,
don't
know
when
what
it's
at
nine?
No,
no
that's
it!
That
I
said
705
PM
for
me
on
the
13th
Eastern.
B
B
It
was
set
up
by
avishay,
okay,
but
I
can
add
you,
okay,.
A
B
A
B
D
All
right,
perfect,
again
really
appreciate
all
the
work,
Dan
and
Christine
great.