Get a passing CII Badge

[caniszczyk]

We require CNCF projects to go through this badging process:
https://bestpractices.coreinfrastructure.org/en

[tomkerkhove]

Working on this but need access to org, normally @jeffhollan has received a notification.

[jeffhollan]

@tomkerkhove just gave you owner access. You should be good to go. Thank you 🙏

[tomkerkhove]

Badge is being added via kedacore/keda#691 but we need to improve a bit

[turbaszek]

Should we be able to check out:

• Unique version numbering points 1 and 3. As the 2.0 is on the horizon should KEDA project agreed to use a versioning approach?
• Bug-reporting process points 2 and 5
• Automated test suite point 1
• Static code analysis points 1, 4 and 2 (this one is vague for me)

[tomkerkhove]

Looks like it's no longer assigned to me. Thanks for the reminder @turbaszek!

Adding @zroubalik who might want to help here.

• Static code analysis points 1, 4 and 2 (this one is vague for me)

It's vague for me as well but think it enforces a set of tools for which we might want to consider leaving it as-is. Do keep in mind we are setting up Snyk as well which does the security side of things.

Maybe @caniszczyk can provide some input here.

• Unique version numbering points 1 and 3. As the 2.0 is on the horizon should KEDA project agreed to use a versioning approach?

In terms of versioning, I honestly think we are good to go but maybe it's because we prefix with v 🤔

• Bug-reporting process points 2 and 5

I've just updated this with the required links, thanks!

• Automated test suite point 1

We already have this in Go so not sure what to change to meet the FLOSS requirement here. Any thought @zroubalik? Maybe we can have a look at other projects how they approach this. Or I can add a link to our tests.

[zroubalik]

Automated test suite is IMHO covered by our e2e tests, which runs periodically every day (night 😄) and runs with each commit merged to the main branch.

[tomkerkhove]

I'll update it asap with that, was my thinking as well

[tomkerkhove]

Did another round of updates but @JorTurFer will jump in and skim it from a dev side as well.

[tomkerkhove]

@JorTurFer Can you check if we can build with purely FLOSS tooling and if we block warnings?

[JorTurFer]

Sure, I'll do it during this week

[JorTurFer]

This is the issue about reproducible builds. We can mark as meet those checks once it's fixed

[tomkerkhove]

We are now passing, @caniszczyk do we need silver/gold as well?

[caniszczyk]

Awesome! Silver/Gold not required but a nice to have!

[tomkerkhove]

I have created #67 to follow-up on silver/gold