Update missing rationale & implementation details for Governance crit…

…eria (#160) * Update missing rationale & implementation details for Governance criteria <title> Signed-off-by: CRob <[email protected]> * Update baseline/OSPS-GV.yaml Co-authored-by: Ben Cotton <[email protected]> Signed-off-by: CRob <[email protected]> * Update baseline/OSPS-GV.yaml Co-authored-by: Ben Cotton <[email protected]> Signed-off-by: CRob <[email protected]> * Update OSPS-GV.yaml adjusted from feedback Signed-off-by: CRob <[email protected]> --------- Signed-off-by: CRob <[email protected]> Co-authored-by: Ben Cotton <[email protected]>
ossf · Jan 24, 2025 · 0289583 · 0289583
1 parent cbeb739
commit 0289583
Showing 1 changed file with 11 additions and 2 deletions.
diff --git a/baseline/OSPS-GV.yaml b/baseline/OSPS-GV.yaml
@@ -12,8 +12,17 @@ criteria:
       The project documentation MUST include the
       Roles and Responsibilities for members of the
       project.
-    rationale: # TODO
-    implementation: # TODO
+    rationale: |
+      Documenting project roles and responsibilities
+      helps project particpants, potential contributors,
+      and downstream consumers have an accurate
+      understand of who is working on the project
+      and what areas of authority they may have.
+    implementation: |
+      Document project participants and their roles
+      through such artifacts as members.md, governance.md, 
+      maintainers.md, or similar file within the source 
+      code repository of the project.
     control_mappings: 
       BPB: B-S-3, B-S-4
       OCRE: 013-021