Re: Coordinated Security Audit for git. Contacts needed

From: Amir Montazery <amir@ostif.org>
Date: Jul 21, 2022, 18:06 UTC
Message-ID: <CADKuG0vVGsC9tFr8bUrC48yhhkyg0Rrafyf39TYhPNXE1ak6mA@mail.gmail.com>
In-Reply-To: <xmqq8romicil.fsf@gitster.g>

Thank you for the reply and information Junio.

Apologies for the mixup. I thank the community members for your time and consideration. If anyone is interested in providing some direction or help with the source code review, supply chain security, or customizing a new setup of CodeQL for git, please let me know. I understand you're all likely very busy so we will keep it as brief as possible. I can be reached at amir@ostif.org.

Thank you again. Hope everyone's summer is going well!

On Thu, Jul 21, 2022 at 12:47 PM Junio C Hamano <gitster@pobox.com> wrote:

Show 28 quoted lines

>
> Amir Montazery <amir@ostif.org> writes:
>
> > We would love to collaborate to establish communication channels with
> > key maintainers. Would it be possible for one of us to join one of
>
> We do not call people "maintainers", but "developers" and/or
> "contributors".
>
> > your community meetings for 5 minutes? Or is there a key person we
> > should be engaging?
>
> There is no "community meetings" other than the informal "stand-up"
> irc discussion that is biweekly.  The log of the latest is at
> https://colabti.org/irclogger/irclogger_log/git-devel?date=2022-07-18
> but generally speaking we are not into "synchronous" communication.
>
> You come to this mailing list and start talking, and that is how you
> are heard by community members, which you're already doing fine ;-).
>
> In case you are not familiar with Git, you can see output from
>
>         git shortlog --no-merges -s -n --since=2.years | head
>
> to see who have been the active contributors.
>
> Thanks.
>

-- 
Amir Montazery
Managing Director
Open Source Technology Improvement Fund
https://ostif.org/
https://calendly.com/ostif