dart-lang / .github Goto Github PK

I cannot commit to the dartdoc repo. Could you change access rights to dart-team?

@Hixie and @godofredoc have been enabling allstar and scorecards for the flutter org and we can help enabling them for dart-lang.

To be able to do that we need org admins help to create a private project called .allstar and grant @Hixie and godofredoc@ contributor access to it to be able to send a PR for the configurations.

Scorecards require a per project configuration and a personal access token stored as SCORECARD_READ_TOKEN in every project scorecards will be installed on. The token should have the following permissions public_repo, read:discussion, read:org, read:repo_hook.

The projects we are planning to enable scorecards are:

• github.com/dart-lang/sdk
• github.com/dart-lang/linter
• github.com/dart-lang/dartdoc
• github.com/dart-lang/site-www
• github.com/dart-lang/test

I don't know what this repo is for - perhaps add a readme.md?

I'm unable to run some graphql queries against two repos in dart-lang:

• dart-lang/lints
• dart-lang/yaml_edit

I'd be worth checking to see who has write permissions there - whether they're set up with the dart-team team.

Similar to #18, I believe there might be a custom team set up for https://github.com/dart-lang/intl. We should remove any custom team there and just use the default dart lang team.

I believe there might be a custom team set up for https://github.com/dart-lang/intl_translation/ - I'm having trouble assigning general dart-lang org members as reviewers of PRs there. We should remove any custom team there and just use the default dart lang team.

• Fix the following alerts:
  • Dependency update tool
• Add scorecards badge

I don't have merge rights in https://github.com/dart-lang/characters; can we give dart-team right there?

These repos don't have descriptions:

• dart-lang/fake_async
• dart-lang/lints
• dart-lang/co19
• dart-lang/clock

I'd suggest:

https://github.com/dart-lang/dart-lang/fake_async
Fake asynchronous events for deterministic testing.

https://github.com/dart-lang/lints
Official Dart lint rules - defines the core and recommended set of lints suggested by the Dart team.

https://github.com/dart-lang/co19
A Dart language and library conformance test suite.

https://github.com/dart-lang/clock
A fakeable wrapper for dart:core clock APIs.

• Fix Alerts:
  • Token permissions
  • Pinned dependencies
• Add scorecards badge

https://github.com/dart-lang/oauth2 is currently set up to merge all commits from a PR by default. The recent repo history is a bit hard to read; I think we should disable that option - prefer squashing.

If we add a SECURITY.md file here, I believe that all the dart-lang/ repos - that don't have their own security files - will inherit this one.

See the recent github blog about this here:
https://github.blog/2022-02-09-coordinated-vulnerability-disclosure-cvd-open-source-projects/

And, the SECURITY.md file we use for the dart-lang/sdk repo: https://github.com/dart-lang/sdk/blob/main/SECURITY.md.

cc @athomas @mit-mit @kevmoo

From https://docs.github.com/en/communities/setting-up-your-project-for-healthy-contributions/creating-a-default-community-health-file, it looks like we can create a CONTRIBUTING.md in this repo, and any other repo in dart-lang/ that doesn't have such a file will inherit this one. We should add one (and separately, consider deleting the versions in other dart-lang/ repos that don't add unique content).

See https://github.com/dart-lang/.allstar/issues/108 (and https://github.com/dart-lang/.allstar/issues/106); we'd like branch protection for https://github.com/dart-lang/intl and https://github.com/dart-lang/intl_trnaslation.

It looks like that repo is defaulting to merging all PR commits (see the commit history here: https://github.com/dart-lang/test_reflective_loader/commits/master).

dart-lang/convert is not currently set up to squash commits for PRs by default - we'll want to configure it to squash.

cc @mosuem