SlideShare a Scribd company logo
GitHub Enterprise Roadshow, Munich
2020-01-29
Engineering Lead
</>
a network of organizations
TECHNOLOGY
CREDIT
PLATFORM
REAL ESTATE
PLATFORM
INSURANCE
PLATFORM
Digitalisation of the
credit, real estate
and insurance
industries
a network-centric
organization
Connecting wishes
with banks
in numbers
>200
employees
662
partners on the
platform
53.5
bill euro
real estate financing
transaction volume
in 2019
3.5
bill euro
credit
transaction volume
in 2019
housing-saving
transaction volume
in 2019
11.0
bill euro
Photo by Khachik Simonian on Unsplash
Photo by Dominika Roseclay from Pexels
Photo by mentatdgt from Pexels
Photo by Ian Kim on Unsplash
Photo by fauxels from Pexels
Photo by anna-m. w. from Pexels
Open Source
&
InnerSource
A community of
practice for applying
The Apache Way in
Europace
challenge or
opportunity
idea
solution in
one team
feedback
share with
community
of practice
adoption by
other teams
recommendation
in documentation
or principle
upstream
sharing
(public)
improvement
of solution
Photo by Chokniti Khongchum from Pexels
Collaboration between
multiple teams on a
shared project
#1 Private repository on GitHub
Private repository on
GitHub org with
pull-requests
#1 Private repository on GitHub
● Use “WIP” labels or draft-pull requests
● Author of pull-request should merge
● Expectation management for reviews
● Pull-request templates are often ignored
● Source code in the cloud has no legal
constraints unless it contains user data
● Continuous integration before merge
#1 Private repository on GitHub
● High entry barrier for other teams
● Does not scale well: How to organize
repositories
● Unknown GitHub accounts as members
● How to collaborate between teams
● Integration with existing development
infrastructure
#1 Private repository on GitHub
Scalability: How to
organize repositories
Unknown GitHub
accounts as members
#2 Teams in GitHub
Replicate team
structure with “teams”
feature on GitHub
#2 Teams in GitHub
● Prefixes in repository names are more
helpful
● READMEs for better findability
● Teams can manage their members
#2 Teams in GitHub
● Management of many repositories is still
cumbersome
● Rules of play for GitHub organization
reduce team autonomy
#2 Teams in GitHub
High entry barrier for
other teams
#3 Support channel in Slack
GitHub as a product
#3 Support channel in Slack
● Support is good, documentation is better
● Documentation is good, trainings are
better
● It’s good to have a FAQ for repeating
issues
● Internal tools are also products
#3 Support channel in Slack
● Documentation for GitHub@Europace
● Git-/GitHub-Trainings
● FAQ on GitHub@Europace
#3 Support channel in Slack
Management of many
repositories is still
cumbersome
Rules of play for GitHub
organization reduce
team autonomy
#4 GitHub org for one product
Divide and conquer:
GitHub orgs for
managing repositories
and teams
#4 GitHub org for one product
● Easier separation of repositories
● More autonomy for team around product
#4 GitHub org for one product
● Less transparency due to limited access
(only team)
● Extra costs for every organization and
additional seats for people of other teams
#4 GitHub org for one product
Less transparency due
to limited access (only
team)
Extra costs for every
organization
#5 GitHub org per subsidiary or product
GitHub Enterprise Cloud
#5 GitHub org per subsidiary or product
● Enforce SSO and 2FA from beginning
● Use units which last longer, i.e. subsidiaries
or products
#5 GitHub org per subsidiary or product
● No enterprise search, search does not find
internal repositories if not member
● CI/CD integration
● GitHub Registry and Actions
● No migration path to Enterprise SSO
● Azure AD supports only max. number of
orgs per SAML connector
#5 GitHub org per subsidiary or product
CI/CD with multiple
organizations
Management of
technical users
#6 CI/CD with technical user per purpose
Integrate security team
into the process of
creating technical users
#6 CI/CD with technical user per purpose
● Integrating cloud and on-premise
infrastructure is not easy
● Personal access tokens have a too broad
scope to be used for CI/CD
● Integrate security team early
● If you only need an RSA key and an access
token, don’t ask for whole ActiveDirectory
account
#6 CI/CD with technical user per purpose
● Use similar process for integrating other
cloud services with on-premise
infrastructure
#6 CI/CD with technical user per purpose
Who should be
contacted for
contributions or other
questions regarding one
project?
#7 Trusted committer for InnerSource documentation
Trusted committer or
code owner
#7 Trusted committer for InnerSource documentation
● Every project needs at least 2 or 3 active
code owners in order to ensure proper
maintenance of the code
● CODEOWNERS file in GitHub repositories
● Accountabilities of a trusted committer or
code owner should be identical for all
teams
#7 Trusted committer for InnerSource documentation
● Questions on non-technical topics need
to be answered outside of issues and
pull-requests, because many
non-developers don’t use GitHub
#7 Trusted committer for InnerSource documentation
How to agree on
standard technologies
between autonomous
teams?
#8 Open decision process for standards
Use Open Decision
Framework from RedHat
#8 Open decision process for standards
● Use IETF RFC 2119 (MUST, SHOULD, MAY etc.)
for defining compliance level of
technology standards
● GitHub flow for reviewing and applying
standards
● Standard committee defined in
CODEOWNERS file
#8 Open decision process for standards
● Communication of standards
#8 Open decision process for standards
for finding the
right direction
for guidance on
the journey
for reducing
uncertainty and
moving forward
Europace's journey to InnerSource

More Related Content

What's hot

WTF is GitOps and Why You Should Care?
WTF is GitOps and Why You Should Care?WTF is GitOps and Why You Should Care?
WTF is GitOps and Why You Should Care?
Weaveworks
 
Data science, DevOps, and drinks: The perfect combination
Data science, DevOps, and drinks: The perfect combinationData science, DevOps, and drinks: The perfect combination
Data science, DevOps, and drinks: The perfect combination
Donnie Berkholz
 
Can Kubernetes Keep a Secret? - Women in AppSec Webinar
Can Kubernetes Keep a Secret? - Women in AppSec WebinarCan Kubernetes Keep a Secret? - Women in AppSec Webinar
Can Kubernetes Keep a Secret? - Women in AppSec Webinar
Soluto
 

What's hot (20)

Guidelines for Working with Contract Developers in Evergreen
Guidelines for Working with Contract Developers in EvergreenGuidelines for Working with Contract Developers in Evergreen
Guidelines for Working with Contract Developers in Evergreen
 
WebRTC Live Q&A Session #4 - WebRTC in WebKit and the story around Apple and ...
WebRTC Live Q&A Session #4 - WebRTC in WebKit and the story around Apple and ...WebRTC Live Q&A Session #4 - WebRTC in WebKit and the story around Apple and ...
WebRTC Live Q&A Session #4 - WebRTC in WebKit and the story around Apple and ...
 
Introduction to License Compliance and My research (D. German)
Introduction to License Compliance and My research (D. German)Introduction to License Compliance and My research (D. German)
Introduction to License Compliance and My research (D. German)
 
Hacktoberfest 2020
Hacktoberfest 2020Hacktoberfest 2020
Hacktoberfest 2020
 
From 0 to DevOps in 5 minutes
From 0 to DevOps in 5 minutesFrom 0 to DevOps in 5 minutes
From 0 to DevOps in 5 minutes
 
Attacking and defending GraphQL applications: a hands-on approach
 Attacking and defending GraphQL applications: a hands-on approach Attacking and defending GraphQL applications: a hands-on approach
Attacking and defending GraphQL applications: a hands-on approach
 
DevSecCon Boston2018 - advanced mobile security automation with bdd
DevSecCon Boston2018 - advanced mobile security automation with bddDevSecCon Boston2018 - advanced mobile security automation with bdd
DevSecCon Boston2018 - advanced mobile security automation with bdd
 
Eclipse Hacker's Guide to the Git Universe
Eclipse Hacker's Guide to the Git UniverseEclipse Hacker's Guide to the Git Universe
Eclipse Hacker's Guide to the Git Universe
 
Open Source Compliance at Orange, OW2online, June 2020
Open Source Compliance at Orange, OW2online, June 2020Open Source Compliance at Orange, OW2online, June 2020
Open Source Compliance at Orange, OW2online, June 2020
 
WTF is GitOps and Why You Should Care?
WTF is GitOps and Why You Should Care?WTF is GitOps and Why You Should Care?
WTF is GitOps and Why You Should Care?
 
Auckland Docker Meetup (July 2015) - DockerCon2015 lightningtalk
Auckland Docker Meetup (July 2015) - DockerCon2015 lightningtalkAuckland Docker Meetup (July 2015) - DockerCon2015 lightningtalk
Auckland Docker Meetup (July 2015) - DockerCon2015 lightningtalk
 
Impliquer des contributeurs externes dans son projet open source
Impliquer des contributeurs externes dans son projet open sourceImpliquer des contributeurs externes dans son projet open source
Impliquer des contributeurs externes dans son projet open source
 
OpenTuesday: Agile Testautomatisierung und Continuous Integration
OpenTuesday: Agile Testautomatisierung und Continuous IntegrationOpenTuesday: Agile Testautomatisierung und Continuous Integration
OpenTuesday: Agile Testautomatisierung und Continuous Integration
 
Acs south coast nsw openness
Acs south coast nsw opennessAcs south coast nsw openness
Acs south coast nsw openness
 
Git tech
Git techGit tech
Git tech
 
Data science, DevOps, and drinks: The perfect combination
Data science, DevOps, and drinks: The perfect combinationData science, DevOps, and drinks: The perfect combination
Data science, DevOps, and drinks: The perfect combination
 
[2020 git lab commit] continuous infrastructure
[2020 git lab commit] continuous infrastructure[2020 git lab commit] continuous infrastructure
[2020 git lab commit] continuous infrastructure
 
Gitlab for JS developers (BrisJs meetup, 2019-Apr-01)
Gitlab for JS developers (BrisJs meetup, 2019-Apr-01)Gitlab for JS developers (BrisJs meetup, 2019-Apr-01)
Gitlab for JS developers (BrisJs meetup, 2019-Apr-01)
 
Can Kubernetes Keep a Secret? - Women in AppSec Webinar
Can Kubernetes Keep a Secret? - Women in AppSec WebinarCan Kubernetes Keep a Secret? - Women in AppSec Webinar
Can Kubernetes Keep a Secret? - Women in AppSec Webinar
 
Git strategies for DevOps
Git strategies for DevOpsGit strategies for DevOps
Git strategies for DevOps
 

Similar to Europace's journey to InnerSource

Tekton_ArgoCD-_KCD_Taiwan-cicd-openshift
Tekton_ArgoCD-_KCD_Taiwan-cicd-openshiftTekton_ArgoCD-_KCD_Taiwan-cicd-openshift
Tekton_ArgoCD-_KCD_Taiwan-cicd-openshift
bashwen2022
 
Sample Presentation.pptx
Sample Presentation.pptxSample Presentation.pptx
Sample Presentation.pptx
ssuser9aed211
 

Similar to Europace's journey to InnerSource (20)

GitHub for partners
GitHub for partnersGitHub for partners
GitHub for partners
 
Better, Faster, Easier: How to Make Git Really Work in the Enterprise
Better, Faster, Easier: How to Make Git Really Work in the EnterpriseBetter, Faster, Easier: How to Make Git Really Work in the Enterprise
Better, Faster, Easier: How to Make Git Really Work in the Enterprise
 
Microsoft Skills Bootcamp - The power of GitHub and Azure
Microsoft Skills Bootcamp - The power of GitHub and AzureMicrosoft Skills Bootcamp - The power of GitHub and Azure
Microsoft Skills Bootcamp - The power of GitHub and Azure
 
A Love Story with Kubevirt and Backstage from Cloud Native NoVA meetup Feb 2024
A Love Story with Kubevirt and Backstage from Cloud Native NoVA meetup Feb 2024A Love Story with Kubevirt and Backstage from Cloud Native NoVA meetup Feb 2024
A Love Story with Kubevirt and Backstage from Cloud Native NoVA meetup Feb 2024
 
Azure DevOps & GitHub... Better Together!
Azure DevOps & GitHub... Better Together!Azure DevOps & GitHub... Better Together!
Azure DevOps & GitHub... Better Together!
 
OpenNTF Webinar 05/07/13: OpenNTF - The IBM Collaboration Solutions App Dev C...
OpenNTF Webinar 05/07/13: OpenNTF - The IBM Collaboration Solutions App Dev C...OpenNTF Webinar 05/07/13: OpenNTF - The IBM Collaboration Solutions App Dev C...
OpenNTF Webinar 05/07/13: OpenNTF - The IBM Collaboration Solutions App Dev C...
 
Lyra Infosystems - GitLab Overview Deck 2020
Lyra Infosystems - GitLab Overview Deck 2020Lyra Infosystems - GitLab Overview Deck 2020
Lyra Infosystems - GitLab Overview Deck 2020
 
Webinar: Capabilities, Confidence and Community – What Flux GA Means for You
Webinar: Capabilities, Confidence and Community – What Flux GA Means for YouWebinar: Capabilities, Confidence and Community – What Flux GA Means for You
Webinar: Capabilities, Confidence and Community – What Flux GA Means for You
 
Tekton_ArgoCD-_KCD_Taiwan-cicd-openshift
Tekton_ArgoCD-_KCD_Taiwan-cicd-openshiftTekton_ArgoCD-_KCD_Taiwan-cicd-openshift
Tekton_ArgoCD-_KCD_Taiwan-cicd-openshift
 
OpenChain Mini-Summit May 2023
OpenChain Mini-Summit May 2023OpenChain Mini-Summit May 2023
OpenChain Mini-Summit May 2023
 
Introducing GitSwarm: Pure Git with Globally Scalable DevOps
Introducing GitSwarm: Pure Git with Globally Scalable DevOpsIntroducing GitSwarm: Pure Git with Globally Scalable DevOps
Introducing GitSwarm: Pure Git with Globally Scalable DevOps
 
Choreo: Empowering the Future of Enterprise Software Engineering
Choreo: Empowering the Future of Enterprise Software EngineeringChoreo: Empowering the Future of Enterprise Software Engineering
Choreo: Empowering the Future of Enterprise Software Engineering
 
Sample Presentation.pptx
Sample Presentation.pptxSample Presentation.pptx
Sample Presentation.pptx
 
Scaling Git for Enterprise DevOps
Scaling Git for Enterprise DevOpsScaling Git for Enterprise DevOps
Scaling Git for Enterprise DevOps
 
Enterprise CI as-a-Service using Jenkins
Enterprise CI as-a-Service using JenkinsEnterprise CI as-a-Service using Jenkins
Enterprise CI as-a-Service using Jenkins
 
Github job support.pptx
Github job support.pptxGithub job support.pptx
Github job support.pptx
 
A Peek Behind the Curtain: Managing the Kubernetes Contributor Community
A Peek Behind the Curtain: Managing the Kubernetes Contributor CommunityA Peek Behind the Curtain: Managing the Kubernetes Contributor Community
A Peek Behind the Curtain: Managing the Kubernetes Contributor Community
 
Let's build Developer Portal with Backstage
Let's build Developer Portal with BackstageLet's build Developer Portal with Backstage
Let's build Developer Portal with Backstage
 
Efficient platform engineering with Microk8s & gopaddle.pdf
Efficient platform engineering  with  Microk8s & gopaddle.pdfEfficient platform engineering  with  Microk8s & gopaddle.pdf
Efficient platform engineering with Microk8s & gopaddle.pdf
 
Open up your platform with Open Source and GitHub
Open up your platform with Open Source and GitHubOpen up your platform with Open Source and GitHub
Open up your platform with Open Source and GitHub
 

Recently uploaded

Future Visions: Predictions to Guide and Time Tech Innovation, Peter Udo Diehl
Future Visions: Predictions to Guide and Time Tech Innovation, Peter Udo DiehlFuture Visions: Predictions to Guide and Time Tech Innovation, Peter Udo Diehl
Future Visions: Predictions to Guide and Time Tech Innovation, Peter Udo Diehl
Peter Udo Diehl
 

Recently uploaded (20)

Syngulon - Selection technology May 2024.pdf
Syngulon - Selection technology May 2024.pdfSyngulon - Selection technology May 2024.pdf
Syngulon - Selection technology May 2024.pdf
 
Linux Foundation Edge _ Overview of FDO Software Components _ Randy at Intel.pdf
Linux Foundation Edge _ Overview of FDO Software Components _ Randy at Intel.pdfLinux Foundation Edge _ Overview of FDO Software Components _ Randy at Intel.pdf
Linux Foundation Edge _ Overview of FDO Software Components _ Randy at Intel.pdf
 
Salesforce Adoption – Metrics, Methods, and Motivation, Antone Kom
Salesforce Adoption – Metrics, Methods, and Motivation, Antone KomSalesforce Adoption – Metrics, Methods, and Motivation, Antone Kom
Salesforce Adoption – Metrics, Methods, and Motivation, Antone Kom
 
IOS-PENTESTING-BEGINNERS-PRACTICAL-GUIDE-.pptx
IOS-PENTESTING-BEGINNERS-PRACTICAL-GUIDE-.pptxIOS-PENTESTING-BEGINNERS-PRACTICAL-GUIDE-.pptx
IOS-PENTESTING-BEGINNERS-PRACTICAL-GUIDE-.pptx
 
Future Visions: Predictions to Guide and Time Tech Innovation, Peter Udo Diehl
Future Visions: Predictions to Guide and Time Tech Innovation, Peter Udo DiehlFuture Visions: Predictions to Guide and Time Tech Innovation, Peter Udo Diehl
Future Visions: Predictions to Guide and Time Tech Innovation, Peter Udo Diehl
 
IESVE for Early Stage Design and Planning
IESVE for Early Stage Design and PlanningIESVE for Early Stage Design and Planning
IESVE for Early Stage Design and Planning
 
AI presentation and introduction - Retrieval Augmented Generation RAG 101
AI presentation and introduction - Retrieval Augmented Generation RAG 101AI presentation and introduction - Retrieval Augmented Generation RAG 101
AI presentation and introduction - Retrieval Augmented Generation RAG 101
 
Strategic AI Integration in Engineering Teams
Strategic AI Integration in Engineering TeamsStrategic AI Integration in Engineering Teams
Strategic AI Integration in Engineering Teams
 
Measures in SQL (a talk at SF Distributed Systems meetup, 2024-05-22)
Measures in SQL (a talk at SF Distributed Systems meetup, 2024-05-22)Measures in SQL (a talk at SF Distributed Systems meetup, 2024-05-22)
Measures in SQL (a talk at SF Distributed Systems meetup, 2024-05-22)
 
How Red Hat Uses FDO in Device Lifecycle _ Costin and Vitaliy at Red Hat.pdf
How Red Hat Uses FDO in Device Lifecycle _ Costin and Vitaliy at Red Hat.pdfHow Red Hat Uses FDO in Device Lifecycle _ Costin and Vitaliy at Red Hat.pdf
How Red Hat Uses FDO in Device Lifecycle _ Costin and Vitaliy at Red Hat.pdf
 
AI revolution and Salesforce, Jiří Karpíšek
AI revolution and Salesforce, Jiří KarpíšekAI revolution and Salesforce, Jiří Karpíšek
AI revolution and Salesforce, Jiří Karpíšek
 
Where to Learn More About FDO _ Richard at FIDO Alliance.pdf
Where to Learn More About FDO _ Richard at FIDO Alliance.pdfWhere to Learn More About FDO _ Richard at FIDO Alliance.pdf
Where to Learn More About FDO _ Richard at FIDO Alliance.pdf
 
Speed Wins: From Kafka to APIs in Minutes
Speed Wins: From Kafka to APIs in MinutesSpeed Wins: From Kafka to APIs in Minutes
Speed Wins: From Kafka to APIs in Minutes
 
Extensible Python: Robustness through Addition - PyCon 2024
Extensible Python: Robustness through Addition - PyCon 2024Extensible Python: Robustness through Addition - PyCon 2024
Extensible Python: Robustness through Addition - PyCon 2024
 
WSO2CONMay2024OpenSourceConferenceDebrief.pptx
WSO2CONMay2024OpenSourceConferenceDebrief.pptxWSO2CONMay2024OpenSourceConferenceDebrief.pptx
WSO2CONMay2024OpenSourceConferenceDebrief.pptx
 
ECS 2024 Teams Premium - Pretty Secure
ECS 2024   Teams Premium - Pretty SecureECS 2024   Teams Premium - Pretty Secure
ECS 2024 Teams Premium - Pretty Secure
 
PLAI - Acceleration Program for Generative A.I. Startups
PLAI - Acceleration Program for Generative A.I. StartupsPLAI - Acceleration Program for Generative A.I. Startups
PLAI - Acceleration Program for Generative A.I. Startups
 
IoT Analytics Company Presentation May 2024
IoT Analytics Company Presentation May 2024IoT Analytics Company Presentation May 2024
IoT Analytics Company Presentation May 2024
 
What's New in Teams Calling, Meetings and Devices April 2024
What's New in Teams Calling, Meetings and Devices April 2024What's New in Teams Calling, Meetings and Devices April 2024
What's New in Teams Calling, Meetings and Devices April 2024
 
Choosing the Right FDO Deployment Model for Your Application _ Geoffrey at In...
Choosing the Right FDO Deployment Model for Your Application _ Geoffrey at In...Choosing the Right FDO Deployment Model for Your Application _ Geoffrey at In...
Choosing the Right FDO Deployment Model for Your Application _ Geoffrey at In...
 

Europace's journey to InnerSource

  • 1. GitHub Enterprise Roadshow, Munich 2020-01-29
  • 3. a network of organizations TECHNOLOGY CREDIT PLATFORM REAL ESTATE PLATFORM INSURANCE PLATFORM Digitalisation of the credit, real estate and insurance industries
  • 5. in numbers >200 employees 662 partners on the platform 53.5 bill euro real estate financing transaction volume in 2019 3.5 bill euro credit transaction volume in 2019 housing-saving transaction volume in 2019 11.0 bill euro
  • 6.
  • 7.
  • 8.
  • 9. Photo by Khachik Simonian on Unsplash
  • 10. Photo by Dominika Roseclay from Pexels
  • 11. Photo by mentatdgt from Pexels
  • 12. Photo by Ian Kim on Unsplash
  • 13. Photo by fauxels from Pexels
  • 14. Photo by anna-m. w. from Pexels
  • 15. Open Source & InnerSource A community of practice for applying The Apache Way in Europace
  • 16. challenge or opportunity idea solution in one team feedback share with community of practice adoption by other teams recommendation in documentation or principle upstream sharing (public) improvement of solution
  • 17. Photo by Chokniti Khongchum from Pexels
  • 18.
  • 19. Collaboration between multiple teams on a shared project #1 Private repository on GitHub
  • 20. Private repository on GitHub org with pull-requests #1 Private repository on GitHub
  • 21. ● Use “WIP” labels or draft-pull requests ● Author of pull-request should merge ● Expectation management for reviews ● Pull-request templates are often ignored ● Source code in the cloud has no legal constraints unless it contains user data ● Continuous integration before merge #1 Private repository on GitHub
  • 22. ● High entry barrier for other teams ● Does not scale well: How to organize repositories ● Unknown GitHub accounts as members ● How to collaborate between teams ● Integration with existing development infrastructure #1 Private repository on GitHub
  • 23.
  • 24. Scalability: How to organize repositories Unknown GitHub accounts as members #2 Teams in GitHub
  • 25. Replicate team structure with “teams” feature on GitHub #2 Teams in GitHub
  • 26. ● Prefixes in repository names are more helpful ● READMEs for better findability ● Teams can manage their members #2 Teams in GitHub
  • 27. ● Management of many repositories is still cumbersome ● Rules of play for GitHub organization reduce team autonomy #2 Teams in GitHub
  • 28.
  • 29. High entry barrier for other teams #3 Support channel in Slack
  • 30. GitHub as a product #3 Support channel in Slack
  • 31. ● Support is good, documentation is better ● Documentation is good, trainings are better ● It’s good to have a FAQ for repeating issues ● Internal tools are also products #3 Support channel in Slack
  • 32. ● Documentation for GitHub@Europace ● Git-/GitHub-Trainings ● FAQ on GitHub@Europace #3 Support channel in Slack
  • 33.
  • 34. Management of many repositories is still cumbersome Rules of play for GitHub organization reduce team autonomy #4 GitHub org for one product
  • 35. Divide and conquer: GitHub orgs for managing repositories and teams #4 GitHub org for one product
  • 36. ● Easier separation of repositories ● More autonomy for team around product #4 GitHub org for one product
  • 37. ● Less transparency due to limited access (only team) ● Extra costs for every organization and additional seats for people of other teams #4 GitHub org for one product
  • 38.
  • 39. Less transparency due to limited access (only team) Extra costs for every organization #5 GitHub org per subsidiary or product
  • 40. GitHub Enterprise Cloud #5 GitHub org per subsidiary or product
  • 41. ● Enforce SSO and 2FA from beginning ● Use units which last longer, i.e. subsidiaries or products #5 GitHub org per subsidiary or product
  • 42. ● No enterprise search, search does not find internal repositories if not member ● CI/CD integration ● GitHub Registry and Actions ● No migration path to Enterprise SSO ● Azure AD supports only max. number of orgs per SAML connector #5 GitHub org per subsidiary or product
  • 43.
  • 44. CI/CD with multiple organizations Management of technical users #6 CI/CD with technical user per purpose
  • 45. Integrate security team into the process of creating technical users #6 CI/CD with technical user per purpose
  • 46. ● Integrating cloud and on-premise infrastructure is not easy ● Personal access tokens have a too broad scope to be used for CI/CD ● Integrate security team early ● If you only need an RSA key and an access token, don’t ask for whole ActiveDirectory account #6 CI/CD with technical user per purpose
  • 47. ● Use similar process for integrating other cloud services with on-premise infrastructure #6 CI/CD with technical user per purpose
  • 48.
  • 49. Who should be contacted for contributions or other questions regarding one project? #7 Trusted committer for InnerSource documentation
  • 50. Trusted committer or code owner #7 Trusted committer for InnerSource documentation
  • 51. ● Every project needs at least 2 or 3 active code owners in order to ensure proper maintenance of the code ● CODEOWNERS file in GitHub repositories ● Accountabilities of a trusted committer or code owner should be identical for all teams #7 Trusted committer for InnerSource documentation
  • 52. ● Questions on non-technical topics need to be answered outside of issues and pull-requests, because many non-developers don’t use GitHub #7 Trusted committer for InnerSource documentation
  • 53.
  • 54. How to agree on standard technologies between autonomous teams? #8 Open decision process for standards
  • 55. Use Open Decision Framework from RedHat #8 Open decision process for standards
  • 56. ● Use IETF RFC 2119 (MUST, SHOULD, MAY etc.) for defining compliance level of technology standards ● GitHub flow for reviewing and applying standards ● Standard committee defined in CODEOWNERS file #8 Open decision process for standards
  • 57. ● Communication of standards #8 Open decision process for standards
  • 58. for finding the right direction for guidance on the journey for reducing uncertainty and moving forward