(tooling-docs) branch main updated: Update Lifecycle Diagram

[wa...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

wave pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tooling-docs.git


The following commit(s) were added to refs/heads/main by this push:
     new 4120dc3  Update Lifecycle Diagram
4120dc3 is described below

commit 4120dc3e7792830a3ff6bca6a8db047cc23046ae
Author: Dave Fisher <da...@comcast.net>
AuthorDate: Mon Jan 27 20:17:04 2025 -0800

    Update Lifecycle Diagram
---
 apache-trusted-release/lifecycle.md | 17 +++++++++--------
 1 file changed, 9 insertions(+), 8 deletions(-)

diff --git a/apache-trusted-release/lifecycle.md b/apache-trusted-release/lifecycle.md
index 53a3b35..5877d09 100644
--- a/apache-trusted-release/lifecycle.md
+++ b/apache-trusted-release/lifecycle.md
@@ -9,21 +9,22 @@ flowchart TD
     B -->|manually triggered| C
     subgraph ATR Platform
     D@{ shape: processes, label: "Evaluate Candidate" }
-    DD@{ shape: process, label: "Sign Candidate" }
     C --> D
+    DD@{ shape: process, label: "Sign Candidate" }
+    D -->|pass| DD
     E@{ shape: sl-rect, label: "Release Vote" }
+    JJ@{ shape: docs, label: "Release" }
+    E -->|pass| JJ
     F@{ shape: dbl-circ, label: "Failed" }
+    D -->|failure| F
+    E -->|failure| F
     FF@{ shape: dbl-circ, label: "Distribution\nFailed" }
-    D -->|pass| DD
     DD --> E
-    D -->|failure| F
     F -->|new candidate| C
     F -->|abandon| K
     FF -->|retry| G
     FF -->|abandon| K
     G@{ shape: processes, label: "Distribute" }
-    E -->|pass| JJ
-    E -->|failure| F
     H@{ shape: trap-t, label: "Manual Distribution" }
     G -->|optional| H
     I[Announce Release]
@@ -31,15 +32,13 @@ flowchart TD
     G -->|failure| FF
     H -->|manually triggered| I
     J@{ shape: dbl-circ, label: "Released" }
-    JJ@{ shape: docs, label: "Release" }
     JJ --> G
     I --> J
     K@{ shape: dbl-circ, label: "Revoked" }
     L@{ shape: trap-t, label: "Announce CVEs" }
     J -->|revoke| K
     J -->|cves| L
-    L -->|announced| J
-    L -->|revoke| K
+    L -->|record cves| J
     end
 ```
 
@@ -90,3 +89,5 @@ flowchart TD
 **Revoked**
 : A Release in this state has been revoked or abandoned.
 
+**Announce CVEs**
+: At some moment after a release happens a project may announce CVEs that either impact a release or are solved by a release. The security team and PMC manage CVEs including announcements and publishing via cveprocess.apache.org The ATR will update SBOMs with new CVEs.


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tooling.apache.org
For additional commands, e-mail: dev-help@tooling.apache.org