[AGREEMENT] Kwonunn application to mergers team #244

Kwonunn commented 2025年03月25日 09:04:30 +01:00

Application

I propose to become part of the mergers team.

1. If you agree, please simply add a 👍 to this issue.
2. If you disagree or have reservations, please write them in a comment below and I will do my best to address them.

This application follows the Forgejo decision making process (accepted after 2 weeks, unless concerns are raised).

Pledge

I pledge to act in accordance with the code of conduct, and all other rules and processes agreed via the Forgejo decision making process.

If there is an agreement for me to be a member of the team, I will consider applying again a year later.

Background

I'm interested in Forgejo because I use it personally and I think it's a good and worthwile project.

I've been working on the security of Forgejo Runner, and I'm going to be working on the From Forking to Forging project in the future.

Previous elections

No response

### Application I propose to become part of the mergers team. 1. If you agree, please simply add a 👍 to this issue. 2. If you disagree or have reservations, please write them in a comment below and I will do my best to address them. This application follows the Forgejo [decision making process](https://codeberg.org/forgejo-contrib/governance/src/branch/main/DECISION-MAKING.md) (accepted after 2 weeks, unless concerns are raised). ### Pledge I pledge to act in accordance with the [code of conduct](https://codeberg.org/forgejo/code-of-conduct/), and all other rules and processes agreed via the Forgejo [decision making process](https://codeberg.org/forgejo-contrib/governance/src/branch/main/DECISION-MAKING.md). If there is an agreement for me to be a member of the team, I will consider applying again a year later. ### Background I'm interested in Forgejo because I use it personally and I think it's a good and worthwile project. I've been working on the security of Forgejo Runner, and I'm going to be working on the From Forking to Forging project in the future. ### Previous elections _No response_

earl-warren commented 2025年03月25日 09:22:01 +01:00

Here is why I support this application.

@Kwonunn was temporarily trusted with admin permissions on the https://code.forgejo.org/forgejo/act and https://code.forgejo.org/forgejo/repositories, for the purpose of testing and publishing a change she worked on to fix a security issue in the runner. She used those powers with discretion to publish two releases https://code.forgejo.org/forgejo/runner/releases/tag/v6.3.0 and https://code.forgejo.org/forgejo/runner/releases/tag/v6.3.1.

@Kwonunn also took the responsibility of driving the security audit of the runner last summer. This is now completed and she is drafting a blog post to summarize how it went. This process required care and discretion to not reveal security issues before they were ready to be fixed.

Here is why I support this application. @Kwonunn was temporarily trusted with admin permissions on the https://code.forgejo.org/forgejo/act and https://code.forgejo.org/forgejo/repositories, for the purpose of testing and publishing a change she worked on to fix a security issue in the runner. She used those powers with discretion to publish two releases https://code.forgejo.org/forgejo/runner/releases/tag/v6.3.0 and https://code.forgejo.org/forgejo/runner/releases/tag/v6.3.1. @Kwonunn also took the responsibility of driving the [security audit of the runner](https://codeberg.org/forgejo/discussions/issues/204) last summer. This is now completed and she is drafting a [blog post](https://codeberg.org/forgejo/website/pulls/566) to summarize how it went. This process required care and discretion to not reveal security issues before they were ready to be fixed.

n0toose commented 2025年03月25日 14:49:56 +01:00

@Kwonunn also took the responsibility of driving the security audit of the runner last summer. This is now completed and they are drafting a blog post to summarize how it went. This process required care and discretion to not reveal security issues before they were ready to be fixed.

+1, Ι have also met them in person and participated with them at representing Codeberg+Forgejo at FOSDEM.

> @Kwonunn also took the responsibility of driving the security audit of the runner last summer. This is now completed and they are drafting a blog post to summarize how it went. This process required care and discretion to not reveal security issues before they were ready to be fixed. +1, Ι have also met them in person and participated with them at representing Codeberg+Forgejo at FOSDEM.