Mathias contributes for a while in Eclipse Tractus-X™ and is already very knowledgable about how working in Open Source and Tractus-X™ works.
He shows very good / examplary contributions, is in contact with plenty of People in Eclipse Tractus-X™, joins the Office Hour and even prepared a list of his contributions himself in a great way.
It is my pleasure to nominate Mathis as a committer on Eclipse Tractus-X™ and will paste his own list below so you can see for yourself how he works:
Mathias Brunkow Moser is a Software Engineer, expert in Cybersecurity, he is one of the main contributors to the Digital Product Pass Application (frontend and backend) in Tractus-X. Since February 2023 he has been contributing actively to the Tractus-X Repository, collaborating, learning and exchanging knowledge with the Security Team and the System Team.
He is attending and participating actively at the DevSecOps meetings weekly, reporting important Security Vulnerabilities to the community at the meetings and creating open discussions at the Tractus-X dev mailing list and at the new eclipse chat.
Open discussion Created in the Mailing List:
https://www.eclipse.org/lists/tractusx-dev/msg00121.html
Use of Eclipse Chat:
Requesting help: https://chat.eclipse.org/#/room/!oXNwXGsvkbDUMiQhms:matrix.eclipse.org/…
Proposing useful new extensions: https://chat.eclipse.org/#/room/!oXNwXGsvkbDUMiQhms:matrix.eclipse.org/…
Vulnerability/Security Fixes PRs:
- Spring Boot libraries vulnerabilities fixed and reported in the DevSecOps Meeting
- First Snake Yaml 2.0 fix in all Tractus-X, detected overnight and fixed in the morning before the QG 5 was finished
- Mitigated important Keycloak vulnerability by migrating from Spring Boot 2 to Spring Boot 3. Complying with the security quality gates 4 for Release 3.0
Contributions with descriptive messages:
- https://github.com/eclipse-tractusx/digital-product-pass/pull/29/commits
- https://github.com/eclipse-tractusx/digital-product-pass/pull/14/commits
Issues:
- Creating: https://github.com/eclipse-tractusx/digital-product-pass/issues/28
- Answering: https://github.com/eclipse-tractusx/digital-product-pass/issues/11#issu…
Remarking the OSS License Scan and Performing the Scan (Making transparent for the community):
- Remarking the necessity of the scan:
- https://github.com/eclipse-tractusx/digital-product-pass/pull/14#issuec…
- https://github.com/eclipse-tractusx/digital-product-pass/pull/21#issuec…
- Performing the scan with the Dash Tool:
- https://github.com/eclipse-tractusx/digital-product-pass/pull/14#issuec…
- https://github.com/eclipse-tractusx/digital-product-pass/pull/21#issuec…
License Headers Update PRs to ensure Apache 2.0 Compliance:
https://github.com/eclipse-tractusx/digital-product-pass/pull/13
Recent Merged Descriptive Pull Requests (Following the agreed DevSecOps small PRs requirement):
https://github.com/eclipse-tractusx/digital-product-pass/pull/26
https://github.com/eclipse-tractusx/digital-product-pass/pull/23
https://github.com/eclipse-tractusx/digital-product-pass/pull/22
https://github.com/eclipse-tractusx/digital-product-pass/pull/16
https://github.com/eclipse-tractusx/digital-product-pass/pull/17
https://github.com/eclipse-tractusx/digital-product-pass/pull/18
https://github.com/eclipse-tractusx/digital-product-pass/pull/20
https://github.com/eclipse-tractusx/digital-product-pass/pull/21 (OSS License Checks performed)
https://github.com/eclipse-tractusx/digital-product-pass/pull/24
Discussions:
https://github.com/eclipse-tractusx/digital-product-pass/pull/12
https://github.com/eclipse-tractusx/digital-product-pass/issues/15
Being Transparent with the Committers and with the community:
https://github.com/eclipse-tractusx/digital-product-pass/pull/20#issuec…
Initial Contributions and new features in Digital Product Pass:
https://github.com/eclipse-tractusx/digital-product-pass/pull/1 (Initial Contribution)
https://github.com/eclipse-tractusx/digital-product-pass/pull/2
https://github.com/eclipse-tractusx/digital-product-pass/pull/4
https://github.com/eclipse-tractusx/digital-product-pass/pull/8
Closed non-compliant PRs:
https://github.com/eclipse-tractusx/digital-product-pass/pull/6
https://github.com/eclipse-tractusx/digital-product-pass/pull/7
Open Source Documentation Update:
https://github.com/eclipse-tractusx/digital-product-pass/pull/10
Discussions:
https://github.com/eclipse-tractusx/digital-product-pass/pull/12
https://github.com/eclipse-tractusx/digital-product-pass/issues/15
All pull requests in tractus-x dpp:
https://github.com/eclipse-tractusx/digital-product-pass/pulls?q=+is%3A…+
Voter | Vote | Comments |
---|---|---|
Siegfried Kiermayer | +1 | +1 implied by nomination |
Jan Kreutzfeld | +1 | |
Evelyn Gurschler | +1 | |
Fabian Grün | +1 | |
Malte Hellmeier | +1 | |
Carsten Lenz | 0 | Mathias is on a good way, but I'm not yet convinced - there is space to improve. Keep going! To convince me, get more familiar with projects TRGs. Recent TractusX release contains several ignored TRGs which I would expect a Commiter is aware of. We have to rely on our committers to be aware of our TRGs and to enforce them. Responsibility for TRGs cannot rest solely with the system-team but currently this is the case. Although there are plenty of obvious good contributions I have to vote with a 0 (with a tendency to -1) and I'm really unhappy about that. |
Tunahan Cicek | +1 | |
Jaro Hartmann | +1 |
PMC Approval
- Andy Riexinger (+1) Welcome!