I will definitely ping GitHub folks about this, but I thought it useful to at least document the desired approach in general.

Dependabot is a service now owned by GitHub. Do we want to expect all people offering a service like this to sign the CNCF CLA and associate their bot with it? The person choosing to use the bot is

+1 NB Cheers, Cathy Zhang Amazon Data Services Ireland Limited registered office: One Burlington Plaza, Burlington Road, Dublin 4, Ireland. Registered in Ireland. Registration number 390566.

Bots can have delegated authority to sign things on behalf of their makers. It seems like it would be even more important for this kind of a bot to have a signature since if it was compromised or

Folks, See: https://github.com/kubernetes-client/javascript/pull/384 Dependabot is automatically generating a PR to update vulnerable dependencies, but of course the CNCF CLA is required, and

+1 NB --Kiran Mova | Co-Founder, Chief Architect MayaData | kiran.mova@... https://github.com/openebs/openebs

+1 (nb) Cheers, Michael -- Developer Advocate @ AWS +353 86 0215164 Amazon Data Services Ireland Limited registered office: One Burlington Plaza, Burlington Road, Dublin 4, Ireland. Registered

+1 binding from Alimail iPhone

+1, binding --brendan

CNCF SIGs should not affect Kubernetes SIGs.

+1 binding

+1 nb On 1/7/20 5:39 AM, Amye Scavarda Perrin wrote:

The CNCF Network SIG has been approved: https://github.com/cncf/toc/pull/317 Binding: 6/9 Matt Klein: https://lists.cncf.io/g/cncf-toc/message/3757 alexis richardson:

Xu, AFAIK, k8s sig-node should remain as it is. Part of this group's focus would be working with sig-node so that runtimes can interface with k8s. For example, having a particular runtime implement

+1 binding (on the assumption the minor details in the PR get addressed) -- Liz Rice @lizrice | lizrice.com | +44 (0) 780 126 1145 On 7 Jan 2020, 14:00 +0000, Pengfei Ni , wrote:

+1 nb Best regards. --- Pengfei Ni Amye Scavarda Perrin <ascavarda@...> 于2020年1月7日周二 上午5:39写道：

+1 nb Rabi From: <cncf-toc@...> on behalf of Philippe Robin <Philippe.Robin@...> Date: Tuesday, 7 January 2020 at 10:18 To: "ascavarda@..." <ascavarda@...>, CNCF TOC <cncf-toc@...> Subject: Re:

+1 nb Philippe

+1 non-binding!

+1 nb -- L.