Ouranosinc / xclim / 30650878371
91%
main: 92%

LAST BUILD BRANCH: dev-v099
DEFAULT BRANCH: main
Ran
Jobs 0
Files 0
Run time –
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
30650878371

push

github

web-flow 
Governance and Security Requirements (#2391)

<!--Please ensure the PR fulfills the following requirements! -->
<!-- If this is your first PR, make sure to add your details to the
AUTHORS.rst! -->
### Pull Request Checklist:
- [ ] This PR addresses an already opened issue (for bug fixes /
features)
    - This PR fixes #xyz
- [ ] Tests for the changes have been added (for bug fixes / features)
- [x] (If applicable) Documentation has been added / updated (for bug
fixes / features)
- [x] CHANGELOG.rst has been updated (with summary of main changes)
- [x] Link to issue (:issue:`number`) and pull request (:pull:`number`)
has been added

### What kind of change does this PR introduce?

* Adds a page detailing how decisions are taken with regard to `xclim`
development
* Adds a section detailing the kinds of security measures in place to
ensure source code and release integrity
* Adds a link to the `xclim` repository directly in the sidebar for
convenience.

### Does this PR introduce a breaking change?

No. All of this information details current practices.

### Other information:

These pages are recommended as part of the [OpenSSF Silver
rating](https://www.bestpractices.dev/en/criteria/1). These changes do
not satisfy this entirely, but it does get us closer. We can also adapt
this documentation to some degree in other projects to help with their
rating as well.

The recommendation for `users may verify the authenticity of the source
release using the published signing key and the project's release
documentation` may not yet be the case according to the OpenSSF
definition. The public signing key may need to be hosted somewhere first
in order to satisfy this requirement.
Source Files on build 30650878371
Detailed source file information is not available for this build.