Skip to content

Commit a43fb6b

Browse files
author
cncf-automation[bot]
committed
Initial .project scaffold for Falco
0 parents  commit a43fb6b

7 files changed

Lines changed: 224 additions & 0 deletions

File tree

‎.github/workflows/update-landscape.yml‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,25 @@
1+
name: Update Landscape
2+
on:
3+
push:
4+
branches: [main]
5+
paths:
6+
- 'project.yaml'
7+
workflow_dispatch:
8+
9+
jobs:
10+
update:
11+
runs-on: ubuntu-latest
12+
permissions:
13+
contents: write
14+
pull-requests: write
15+
steps:
16+
- name: Checkout
17+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
18+
with:
19+
fetch-depth: 0
20+
21+
- name: Update Landscape
22+
uses: cncf/automation/.github/actions/landscape-update@53810a548b46f33421cd67e57d16e4b7251416d9
23+
with:
24+
project_file: 'project.yaml'
25+
token: ${{ secrets.LANDSCAPE_REPO_TOKEN }}

‎.github/workflows/validate.yaml‎

Lines changed: 40 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,40 @@
1+
name: Validate Project Metadata
2+
3+
on:
4+
pull_request:
5+
paths:
6+
- 'project.yaml'
7+
- 'maintainers.yaml'
8+
push:
9+
branches: [main]
10+
paths:
11+
- 'project.yaml'
12+
- 'maintainers.yaml'
13+
workflow_dispatch:
14+
15+
jobs:
16+
validate-project:
17+
runs-on: ubuntu-latest
18+
steps:
19+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
20+
with:
21+
fetch-depth: 0
22+
23+
- uses: cncf/automation/.github/actions/validate-project@53810a548b46f33421cd67e57d16e4b7251416d9
24+
with:
25+
project_file: 'project.yaml'
26+
27+
validate-maintainers:
28+
runs-on: ubuntu-latest
29+
steps:
30+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
31+
with:
32+
fetch-depth: 0
33+
34+
- uses: cncf/automation/.github/actions/validate-maintainers@53810a548b46f33421cd67e57d16e4b7251416d9
35+
with:
36+
maintainers_file: 'maintainers.yaml'
37+
# Disabled until the LFX LLT issue is resolved. Validation is done manually for now.
38+
verify_maintainers: 'false'
39+
env:
40+
LFX_AUTH_TOKEN: ${{ secrets.LFX_AUTH_TOKEN }}

‎.gitignore‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
.cache/
2+
.DS_Store
3+
Thumbs.db
4+
.idea/
5+
.vscode/
6+
*~
7+
*.swp

‎CODEOWNERS‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
# CODEOWNERS for .project metadata repository
2+
# Changes to project metadata require maintainer review.
3+
* @andreagit97 @cpanato @fededp @gnosek @jasondellaluce @leogr @loresuso @lucaguerra @mstemm @ekoops @maxgio92 @molter73 @incertum @zuc @issif @alacuku @sgaist @deepskyblue86 @geraldcombs @irozzo-1A @therealbobo @c2ndev

‎README.md‎

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
# Falco `.project`
2+
3+
`.project` (dot-project) is a CNCF initiative to centralize and automate metadata management for all CNCF projects.
4+
This repository holds the canonical metadata for [Falco](https://falco.org/) and is maintained by the CNCF automation tooling.
5+
6+
## What's in this repo
7+
8+
| File | Purpose |
9+
|------|---------|
10+
| `project.yaml` | Canonical project metadata (name, maturity, repositories, governance links, …) |
11+
| `maintainers.yaml` | Maintainer and reviewer roster used for drift detection and mailing-list sync |
12+
| `CODEOWNERS` | Ensures PRs to this repo require maintainer approval |
13+
| `.github/workflows/validate.yaml` | CI — validates `project.yaml` and `maintainers.yaml` on every PR |
14+
| `.github/workflows/update-landscape.yml` | Automatically proposes landscape updates when `project.yaml` changes |
15+
16+
## Keeping metadata up to date
17+
18+
Open a pull request against this repository to update any metadata field.
19+
The validate workflow will check schema correctness and block merge if validation fails.
20+
21+
> **Note:** This repository was bootstrapped automatically from public sources (CNCF landscape, CLOMonitor, GitHub governance files).
22+
> Some fields are best-effort guesses marked with `# TODO: AUTO-DETECTED — please verify` in the YAML files and should be confirmed by the project maintainers.
23+
24+
## Resources
25+
26+
- [`.project` documentation](https://github.com/cncf/automation/tree/main/utilities/dot-project)
27+
- [Schema reference](https://github.com/cncf/automation/blob/main/utilities/dot-project/SCHEMA.md)
28+
- [CNCF Automation repository](https://github.com/cncf/automation)

‎maintainers.yaml‎

Lines changed: 47 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,47 @@
1+
# Maintainer roster for Falco
2+
# Documentation: https://github.com/cncf/automation/tree/main/utilities/dot-project
3+
4+
5+
# Maintainers: Please connect your GitHub handle to your LFID on openprofile.dev to enable automatic access to CNCF resources. The system will use your primary email address for setup.
6+
maintainers:
7+
- project_id: "falco"
8+
org: "falcosecurity"
9+
teams:
10+
- name: "maintainers"
11+
members:
12+
- andreagit97
13+
- cpanato
14+
- fededp
15+
- gnosek
16+
- jasondellaluce
17+
- leogr
18+
- loresuso
19+
- lucaguerra
20+
- mstemm
21+
- ekoops
22+
- maxgio92
23+
- molter73
24+
- incertum
25+
- zuc
26+
- issif
27+
- alacuku
28+
- sgaist
29+
- deepskyblue86
30+
- geraldcombs
31+
- irozzo-1A
32+
- therealbobo
33+
- c2ndev
34+
# Unmanaged teams: teams with "managed: false" are tracked in this
35+
# file for documentation but are excluded from CNCF resource
36+
# provisioning (mailing lists, service desk, Copilot seats, etc).
37+
#
38+
# Active contributors who do not need full CNCF resource access:
39+
# - name: "reviewers"
40+
# managed: false
41+
# members:
42+
# - reviewer-handle
43+
#
44+
# Former maintainers (remove this section if not applicable):
45+
# - name: "emeritus"
46+
# managed: false
47+
# members: []

‎project.yaml‎

Lines changed: 74 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,74 @@
1+
# .project metadata for Falco
2+
# Documentation: https://github.com/cncf/automation/tree/main/utilities/dot-project
3+
4+
# TODO: Add package_managers if distributed via registries
5+
6+
schema_version: "1.0.0"
7+
slug: "falco"
8+
name: "Falco"
9+
description: "Falco, the cloud-native runtime security project, is the de facto Kubernetes threat detection engine"
10+
type: "project"
11+
project_lead: "andreagit97" # TODO: AUTO-DETECTED — please verify
12+
slack_channels: # TODO: AUTO-DETECTED — please verify the channel(s) below
13+
- name: "#falco"
14+
link: "https://kubernetes.slack.com/messages/falco"
15+
primary: true
16+
- name: "#slack-channel"
17+
- name: "#sandbox"
18+
19+
maturity_log:
20+
- phase: "graduated"
21+
date: "2018-10-10T00:00:00Z"
22+
issue: "https://github.com/cncf/toc/pull/956" # TODO: AUTO-DETECTED — please verify
23+
24+
repositories: # TODO: AUTO-DETECTED primary — please verify
25+
- url: "https://github.com/falcosecurity/falco"
26+
primary: true
27+
# tags: [core, sig-apps] # Optional
28+
29+
website: "https://falco.org/"
30+
31+
artwork: "https://landscape.cncf.io/logos/falco.svg"
32+
33+
adopters:
34+
path: "https://github.com/falcosecurity/falco/blob/master/ADOPTERS.md"
35+
36+
37+
# TODO: Add package manager identifiers if your project is distributed via registries
38+
# package_managers:
39+
# docker: "falcosecurity/falco"
40+
41+
social:
42+
twitter: "https://twitter.com/falco_org"
43+
44+
security:
45+
policy:
46+
path: "https://github.com/falcosecurity/.github/blob/main/SECURITY.md"
47+
contact:
48+
advisory_url: "https://github.com/falcosecurity/falco/security/advisories/new"
49+
50+
governance:
51+
contributing:
52+
path: "https://github.com/falcosecurity/falco/blob/master/Contributing.md"
53+
code_of_conduct:
54+
path: "https://github.com/falcosecurity/.github/blob/main/CODE_OF_CONDUCT.md"
55+
56+
legal:
57+
license:
58+
path: "https://github.com/falcosecurity/falco/blob/master/LICENSE"
59+
identity_type:
60+
has_dco: true # AUTO-DETECTED — please verify
61+
has_cla: false # AUTO-DETECTED — please verify
62+
dco_url:
63+
path: "https://developercertificate.org/"
64+
65+
documentation:
66+
readme:
67+
path: "https://github.com/falcosecurity/falco/blob/master/README.md"
68+
69+
landscape:
70+
category: "Provisioning"
71+
subcategory: "Security & Compliance"
72+
73+
# CLOMonitor Score: 84/100
74+
# Documentation: 100 | License: 86 | Best Practices: 62 | Security: 68

0 commit comments

Comments
 (0)