[proposal] Contribution to OpenSSF

[eddie-knight]

Currently, the primary users of Privateer are (1) maintainers of Linux Foundation projects, and (2) end users of LF-published control catalogs.

The primary examples include FINOS Common Cloud Controls, OpenSSF ORBIT, as well as users of the OpenSSF's Baseline scanner — such as LFX Insights and multiple CNCF projects.

During the course of discussions with OpenSSF ORBIT users, it was brought to the Privateer maintainers' attention that there is a growing desire for Privateer to be brought under a neutral governance structure to ensure continuity of the IP and open source license.

Considering that Privateer is most closely aligned with the mission and projects within the OpenSSF, we aim to propose contribution to that foundation through the ORBIT Working Group.

Tasks

• Establish interest from the OpenSSF ORBIT Working Group to sponsor the contribution @eddie-knight
• Open a Sandbox issue on the OpenSSF Technical Advisory Committee repo @jmeridth
• Present the project to the OpenSSF TAC @jmeridth @eddie-knight
• Wait for response, continue if project is accepted
• Work with LF Legal for IP transfer and related details
• Work with OpenSSF Staff for org transfer to OpenSSF GitHub Enterprise ownership