Separate CODEOWNERS into separate teams to better enforce least privi…

…lege * downgrade oqs-contributors to triage * merge oqs-contributors team with triage team * factor out liboqs-codeowners and oqs-provider-codeowners Signed-off-by: Spencer Wilson <[email protected]>
open-quantum-safe · Sep 26, 2024 · 7f6219c · 7f6219c
1 parent 55edc46
commit 7f6219c
Showing 1 changed file with 44 additions and 40 deletions.
diff --git a/config.yaml b/config.yaml
@@ -27,13 +27,6 @@ teams:
   members:
   - fcasal
   - tob-scott-a
-# triage access across technical projects
-- name: triage
-  maintainers:
-  - dstebila
-  members:
-  - ajbozarth
-  - planetf1
 
 # A sensible default for projects without a clear list of Maintainers.
 # Consists of TSC members who are maintainers of at least one active OQS subproject.
@@ -68,13 +61,12 @@ teams:
   - SWilson4
   - vsoftco
 # A sensible default for projects without a clear list of Contributors.
-# Developers who have contributed substantial code to at least one OQS subproject.
-# This includes all people who are listed in a CODEOWNERS file in an OQS subproject.
 # TODO: add/update per-project GOVERNANCE.md files and remove this team.
 - name: oqs-contributors
   maintainers:
   - dstebila
   members:
+  - ajbozarth
   - ashman-p
   - alexrow
   - cothan
@@ -87,6 +79,7 @@ teams:
   - jschanck
   - Martyrshot
   - pi-314159
+  - planetf1
   - thb-sb
   - thomwiggers
 
@@ -125,6 +118,18 @@ teams:
   - praveksharma
   - SWilson4
   - vsoftco
+# liboqs CODEOWNERS
+# https://github.com/open-quantum-safe/liboqs/blob/main/.github/CODEOWNERS
+- name: liboqs-codeowners
+  maintainers:
+  - dstebila
+  members:
+  - alexrow
+  - baentsch
+  - bhess
+  - crockeea
+  - jschanck
+  - SWilson4
 
 # oqs-provider Maintainers
 # https://github.com/open-quantum-safe/oqs-provider/blob/main/GOVERNANCE.md#maintainers-1
@@ -140,6 +145,18 @@ teams:
   - bhess
   - christianpaquin
   - thb-sb
+# oqs-provider CODEOWNERS
+# https://github.com/open-quantum-safe/oqs-provider/blob/main/.github/CODEOWNERS
+- name: oqs-provider-codeowners
+  maintainers:
+  - baentsch
+  members:
+  - alexrow
+  - bhess
+  - feventura
+  - iyanmv
+  - jplomas
+  - thb-sb
 
 # boringssl Maintainers
 # TODO: provide "source of truth"
@@ -239,9 +256,9 @@ repositories:
     liboqs-maintainers: admin
     oqs-release-managers: maintain
     liboqs-committers: write
-    oqs-contributors: write
+    liboqs-codeowners: write
+    oqs-contributors: triage
     bots: write
-    triage: triage
     tsc: read
   visibility: public
 
@@ -250,10 +267,10 @@ repositories:
     oqs-admins: admin
     oqs-provider-maintainers: admin
     oqs-release-managers: maintain
-    oqs-provider-committers: maintain
-    oqs-contributors: write
+    oqs-provider-committers: write
+    oqs-provider-codeowners: write
+    oqs-contributors: triage
     bots: write
-    triage: triage
     tsc: read
   visibility: public
 
@@ -263,9 +280,8 @@ repositories:
     boringssl-maintainers: admin
     oqs-release-managers: maintain
     oqs-committers: write
-    oqs-contributors: write
+    oqs-contributors: triage
     bots: write
-    triage: triage
     tsc: read
   visibility: public
 
@@ -275,9 +291,8 @@ repositories:
     oqs-maintainers: admin
     openssh-release-managers: maintain
     oqs-committers: write
-    oqs-contributors: write
+    oqs-contributors: triage
     bots: write
-    triage: triage
     tsc: read
   visibility: public
 
@@ -287,9 +302,8 @@ repositories:
     oqs-maintainers: admin
     oqs-release-managers: maintain
     oqs-committers: write
-    oqs-contributors: write
+    oqs-contributors: triage
     bots: write
-    triage: triage
     tsc: read
   visibility: public
 
@@ -299,9 +313,8 @@ repositories:
     oqs-maintainers: admin
     oqs-release-managers: maintain
     oqs-committers: write
-    oqs-contributors: write
+    oqs-contributors: triage
     bots: write
-    triage: triage
     tsc: read
   visibility: public
 
@@ -311,9 +324,8 @@ repositories:
     oqs-maintainers: admin
     oqs-release-managers: maintain
     oqs-committers: write
-    oqs-contributors: write
+    oqs-contributors: triage
     bots: write
-    triage: triage
     tsc: read
   visibility: public
 
@@ -323,9 +335,8 @@ repositories:
     oqs-maintainers: admin
     oqs-release-managers: maintain
     oqs-committers: write
-    oqs-contributors: write
+    oqs-contributors: triage
     bots: write
-    triage: triage
     tsc: read
   visibility: public
 
@@ -335,9 +346,8 @@ repositories:
     liboqs-cpp-maintainers: admin
     liboqs-cpp-release-managers: maintain
     oqs-committers: write
-    oqs-contributors: write
+    oqs-contributors: triage
     bots: write
-    triage: triage
     tsc: read
   visibility: public
 
@@ -347,9 +357,8 @@ repositories:
     liboqs-go-maintainers: admin
     liboqs-go-release-managers: maintain
     oqs-committers: write
-    oqs-contributors: write
+    oqs-contributors: triage
     bots: write
-    triage: triage
     tsc: read
   visibility: public
 
@@ -359,9 +368,8 @@ repositories:
     liboqs-python-maintainers: admin
     liboqs-python-release-managers: maintain
     oqs-committers: write
-    oqs-contributors: write
+    oqs-contributors: triage
     bots: write
-    triage: triage
     tsc: read
   visibility: public
 
@@ -371,9 +379,8 @@ repositories:
     liboqs-rust-maintainers: admin
     liboqs-rust-release-managers: maintain
     oqs-committers: write
-    oqs-contributors: write
+    oqs-contributors: triage
     bots: write
-    triage: triage
     tsc: read
   visibility: public
 
@@ -383,9 +390,8 @@ repositories:
     oqs-maintainers: admin
     oqs-release-managers: maintain
     oqs-committers: write
-    oqs-contributors: write
+    oqs-contributors: triage
     bots: write
-    triage: triage
     tsc: read
   visibility: public
 
@@ -395,9 +401,8 @@ repositories:
     liboqs-java-maintainers: admin
     oqs-release-managers: maintain
     oqs-committers: write
-    oqs-contributors: write
+    oqs-contributors: triage
     bots: write
-    triage: triage
     tsc: read
   visibility: public
 
@@ -407,9 +412,8 @@ repositories:
     oqs-admins: admin
     oqs-maintainers: admin
     oqs-committers: write
-    oqs-contributors: write
+    oqs-contributors: triage
     bots: write
-    triage: triage
     tsc: read
   visibility: public