InnerSource Community of Practice
A group of people sharing common concerns, problems, or interests in InnerSource in the VA. Come join us on the first Friday of every month and asynchronously on the #innersource Slack channel!
Key initiatives for the InnerSource Community of practice are:
- Definition: Define what InnerSource means to the VA
- Support: Acquire a sponsor on the leadership or Senior Engineering management team
- Quorum: Meet regularly with InnerSource interested folks and help determine how InnerSource will take shape at the VA
- Checklist: Create a checklist of criteria that are required to become an official InnerSource Project
- Discovery: Determine and build where your curated list of InnerSource projects will be hosted.
- Governance: Determine and document how a typical InnerSource project should be governed. (Think about what happens when product A and B share an InnerSource project and want to take it different directions or change deadlines)
- Training: Develop and deliver a Developer and Manager training (potentially annual) module
When
Every 1st Friday of the month starting Feb 5th, 2021
Where
Topics
You can submit a topic to discuss or view topics already submitted or discussed
More information
- Please see the repo for more information.
Product Security Community of Practice
A group of people sharing common concerns, problems, or interests around Product/Code Security in the VA. It is recommended that every product team have at least 1 representative at this meeting every month. Come join us on the third Thursday of every month and asynchronously on the #product-security Slack channel!
Key initiatives for the Product Security Community of practice are:
- VA-container-registry for trusted images
- Code security scanning tools guides and training
- Monthly security reports
- Initiative to address code scanning remediation as data shows its not yet occurring
When
Every 3rd Thursday of the month
Where
Topics
You can submit a topic to discuss or view topics already submitted or discussed
More information
- Please see the repo for more information.