Adds FOSSA registration and team details to maintainer route#97
Merged
RobertKielty merged 6 commits intocncf:mainfrom Mar 13, 2026
Merged
Conversation
- add a maintainer-page FOSSA service panel showing account state and required team memberships across projects
- add maintainer-page actions to refresh FOSSA state, send invites, and reconcile missing team assignments
- add maintainer-profile BDD coverage and wire web BDD to run against Microcks-backed FOSSA mocks
- document the Microcks-based web test setup and add staged PII checking alongside the existing SOPS hook
FOSSA API mitigation:
- update the local FOSSA Swagger and mock contract to reflect observed live behavior for PUT /teams/{id}/users
- treat users[].id as the live request field instead of the documented users[].userId
- send a compatibility payload including both id and userId when adding users to teams
- stop hardcoding the Team Admin role ID and resolve it dynamically from GET /roles
- add tests and mocks that lock in the observed live contract so maintainer-d remains compatible while upstream docs/spec catch
up
Signed-off-by: Robert Kielty <robert.kielty@cncf.io>
- add scripts/check-pii.sh to scan staged or changed files for likely personal emails and obvious tokens - add scripts/pii-allowlist.regex for approved fixture and documentation placeholders - extract the existing SOPS validation into scripts/check-sops-secrets.sh - update .githooks/pre-commit to run both the SOPS check and the new PII check - add a GitHub Actions workflow to run the PII scan on changed files in push and pull request diffs - document the hook behavior and allowlist usage in docs/development.md Signed-off-by: Robert Kielty <robert.kielty@cncf.io>
RobertKielty
changed the title
Signed-off-by: Robert Kielty <robert.kielty@cncf.io>
FOSSA_API_TOKEN is needed by our services even when using microcks Signed-off-by: Robert Kielty <robert.kielty@cncf.io>
Signed-off-by: Robert Kielty <robert.kielty@cncf.io>
Signed-off-by: Robert Kielty <robert.kielty@cncf.io>
RobertKielty
added
improvement
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds CNCF FOSSA details to the maintainer route/page
Adds staged PII checks to local githooks and CI workflow