Skip to content

Add community governance files#12

Merged
renecannao merged 1 commit intomasterfrom
task3-governance-files
Mar 23, 2026
Merged

Add community governance files#12
renecannao merged 1 commit intomasterfrom
task3-governance-files

Conversation

@renecannao
Copy link
Copy Markdown

@renecannao renecannao commented Mar 23, 2026

Summary

  • Add CODE_OF_CONDUCT.md — Contributor Covenant v2.1 adapted for the project
  • Add CONTRIBUTING.md — Contribution guidelines including bug reports, PRs, coding standards, DCO sign-off, and build/test instructions
  • Add MAINTAINERS.md — Current maintainer listing and responsibilities
  • Add SECURITY.md — Security vulnerability reporting policy with response timelines and supported versions

Test plan

  • Verify all four files render correctly on GitHub
  • Confirm links in CONTRIBUTING.md point to correct destinations
  • Verify contact emails in CODE_OF_CONDUCT.md and SECURITY.md are correct

Summary by CodeRabbit

  • Documentation
    • Added Code of Conduct defining community standards and expected behavior with reporting guidelines
    • Added Contributing Guidelines detailing bug reporting, feature requests, and pull request submission processes
    • Added Maintainers documentation outlining project governance and maintainer responsibilities
    • Added Security Policy with vulnerability reporting procedures and version support information

Add CODE_OF_CONDUCT.md, CONTRIBUTING.md, MAINTAINERS.md, and SECURITY.md
to establish community standards, contribution guidelines, maintainer
information, and security reporting policies for the project.
Copilot AI review requested due to automatic review settings March 23, 2026 21:59
@gemini-code-assist
Copy link
Copy Markdown

Summary of Changes

Hello, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request establishes foundational community governance by introducing several key Markdown files. These documents aim to clarify expectations for contributors, define project leadership roles, and provide a structured process for security vulnerability reporting, fostering a more organized and secure open-source environment.

Highlights

  • Code of Conduct: Added CODE_OF_CONDUCT.md based on Contributor Covenant v2.1 to define expected behavior and enforcement within the community.
  • Contribution Guidelines: Introduced CONTRIBUTING.md detailing how to report bugs, suggest features, submit pull requests, coding standards, DCO, and build/test instructions.
  • Maintainer Information: Created MAINTAINERS.md to list current maintainers, their responsibilities, and the path to becoming a maintainer.
  • Security Policy: Added SECURITY.md outlining the process for reporting vulnerabilities, response timelines, and supported versions.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Mar 23, 2026

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: cbfabab4-ef94-492f-bc4b-64e64658fa5c

📥 Commits

Reviewing files that changed from the base of the PR and between 9e99dd6 and 7ac7313.

📒 Files selected for processing (4)
  • CODE_OF_CONDUCT.md
  • CONTRIBUTING.md
  • MAINTAINERS.md
  • SECURITY.md

📝 Walkthrough

Walkthrough

The PR adds four governance documentation files: CODE_OF_CONDUCT.md establishes community standards and behavior expectations, CONTRIBUTING.md provides contribution guidelines and Developer Certificate of Origin requirements, MAINTAINERS.md documents project ownership and governance structure, and SECURITY.md outlines vulnerability reporting procedures and version support policies.

Changes

Cohort / File(s) Summary
Governance and Community Documentation
CODE_OF_CONDUCT.md, CONTRIBUTING.md, MAINTAINERS.md, SECURITY.md
Four new governance files added: Contributor Code of Conduct defining community standards, contribution guidelines with bug/feature templates and DCO sign-off requirements, maintainer documentation listing roles and responsibilities, and security vulnerability reporting process with response timelines and version support matrix.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related issues

Poem

🐰 hops with glee
Four scrolls of wisdom now in place,
A welcoming and ordered space!
Codes of conduct, guidelines bright,
Our warren's governance shines right! 🌟

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title 'Add community governance files' accurately and directly describes the main change: adding four governance-related documentation files (CODE_OF_CONDUCT.md, CONTRIBUTING.md, MAINTAINERS.md, SECURITY.md).
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch task3-governance-files

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Copy Markdown

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request effectively introduces crucial community governance files: CODE_OF_CONDUCT.md, CONTRIBUTING.md, MAINTAINERS.md, and SECURITY.md. These additions are well-structured and provide clear guidelines for community interaction, contributions, maintainer roles, and security vulnerability reporting. The content aligns with standard practices for open-source projects, enhancing the project's professionalism and contributor experience.

Comment thread CONTRIBUTING.md

### Submitting Pull Requests

1. Fork the repository
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

It is a common practice in the open-source community to use main as the default branch name instead of master for new projects or documentation. Consider updating this to main for consistency with modern Git workflows and inclusive language.

Suggested change
1. Fork the repository
2. Create a feature branch from `main`

Comment thread CONTRIBUTING.md
1. Fork the repository
2. Create a feature branch from `master`
3. Make your changes
4. Submit a PR against `master`
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

Similar to the previous comment, consider updating the target branch for pull requests from master to main to align with modern Git practices.

Suggested change
4. Submit a PR against `master`
5. Submit a PR against `main`

Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds standard community/governance documentation files at the repo root to guide contributions, conduct expectations, maintainer roles, and security vulnerability reporting.

Changes:

  • Add CODE_OF_CONDUCT.md (Contributor Covenant-based code of conduct + enforcement contact)
  • Add CONTRIBUTING.md (bug reports/PR process, coding standards, DCO sign-off, build/test commands)
  • Add MAINTAINERS.md and SECURITY.md (maintainer listing/responsibilities, vuln reporting + response timelines)

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 3 comments.

File Description
CODE_OF_CONDUCT.md Introduces a project code of conduct and enforcement contact.
CONTRIBUTING.md Documents contribution workflow, formatting/testing expectations, and DCO sign-off.
MAINTAINERS.md Lists current maintainer(s) and outlines maintainer responsibilities.
SECURITY.md Defines vulnerability reporting process, response timelines, and supported versions policy.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread CONTRIBUTING.md
Comment on lines +9 to +16
- Use [GitHub Issues](https://github.com/proxysql/orchestrator/issues) with the **Bug Report** template
- Include your orchestrator version, backend type (MySQL/SQLite), and sanitized configuration
- Provide topology information: `orchestrator-client -c topology -alias my-cluster`
- Include logs with `--debug --stack` flags for maximum verbosity

### Suggesting Features

- Use [GitHub Issues](https://github.com/proxysql/orchestrator/issues) with the **Feature Request** template
Copy link

Copilot AI Mar 23, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This references using the Bug Report issue template, but the repo currently only has a single .github/ISSUE_TEMPLATE.md (no dedicated bug-report template). Please update the text to reflect the current issue template setup, or add the missing issue templates/forms.

Suggested change
- Use [GitHub Issues](https://github.com/proxysql/orchestrator/issues) with the **Bug Report** template
- Include your orchestrator version, backend type (MySQL/SQLite), and sanitized configuration
- Provide topology information: `orchestrator-client -c topology -alias my-cluster`
- Include logs with `--debug --stack` flags for maximum verbosity
### Suggesting Features
- Use [GitHub Issues](https://github.com/proxysql/orchestrator/issues) with the **Feature Request** template
- Open a [GitHub issue](https://github.com/proxysql/orchestrator/issues) using the default issue template
- Include your orchestrator version, backend type (MySQL/SQLite), and sanitized configuration
- Provide topology information: `orchestrator-client -c topology -alias my-cluster`
- Include logs with `--debug --stack` flags for maximum verbosity
### Suggesting Features
- Open a [GitHub issue](https://github.com/proxysql/orchestrator/issues) describing your feature request

Copilot uses AI. Check for mistakes.
Comment thread CONTRIBUTING.md
Comment on lines +9 to +16
- Use [GitHub Issues](https://github.com/proxysql/orchestrator/issues) with the **Bug Report** template
- Include your orchestrator version, backend type (MySQL/SQLite), and sanitized configuration
- Provide topology information: `orchestrator-client -c topology -alias my-cluster`
- Include logs with `--debug --stack` flags for maximum verbosity

### Suggesting Features

- Use [GitHub Issues](https://github.com/proxysql/orchestrator/issues) with the **Feature Request** template
Copy link

Copilot AI Mar 23, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This references using a Feature Request issue template, but the repo currently only has a single .github/ISSUE_TEMPLATE.md (no dedicated feature-request template). Please update the guidance or add the missing template(s) so links/instructions don’t dead-end.

Suggested change
- Use [GitHub Issues](https://github.com/proxysql/orchestrator/issues) with the **Bug Report** template
- Include your orchestrator version, backend type (MySQL/SQLite), and sanitized configuration
- Provide topology information: `orchestrator-client -c topology -alias my-cluster`
- Include logs with `--debug --stack` flags for maximum verbosity
### Suggesting Features
- Use [GitHub Issues](https://github.com/proxysql/orchestrator/issues) with the **Feature Request** template
- Use [GitHub Issues](https://github.com/proxysql/orchestrator/issues) and follow the issue template
- Include your orchestrator version, backend type (MySQL/SQLite), and sanitized configuration
- Provide topology information: `orchestrator-client -c topology -alias my-cluster`
- Include logs with `--debug --stack` flags for maximum verbosity
### Suggesting Features
- Use [GitHub Issues](https://github.com/proxysql/orchestrator/issues) and clearly mark the issue as a feature request

Copilot uses AI. Check for mistakes.
Comment thread SECURITY.md
Comment on lines +23 to +26
| Version | Supported |
|---------|-----------|
| 4.x | Yes |
| 3.x | No |
Copy link

Copilot AI Mar 23, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The Supported Versions table lists 4.x as supported and 3.x as unsupported, but the repository’s RELEASE_VERSION is currently 3.2.6. Please align this policy with the versions actually being released/supported (or clarify the intended cutoff/EOL for 3.x and whether 4.x is available yet).

Suggested change
| Version | Supported |
|---------|-----------|
| 4.x | Yes |
| 3.x | No |
| Version | Supported |
|---------|-------------------------------|
| 3.x | Yes |
| 4.x | Planned (not yet released) |

Copilot uses AI. Check for mistakes.
@renecannao renecannao merged commit 689477c into master Mar 23, 2026
5 of 8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants