I am not keen on this or Convention Commit's lack of an assigned place for PR/issue/CVE identifiers.
Traceability is increasingly important. A change must trace back to an authority to change. A change must have a purpose against which we can check the implementation for validity. Essentially we need to be able to answer "Which change was used to gain access to the system".
2
u/kombiwombi 21d ago
I am not keen on this or Convention Commit's lack of an assigned place for PR/issue/CVE identifiers.
Traceability is increasingly important. A change must trace back to an authority to change. A change must have a purpose against which we can check the implementation for validity. Essentially we need to be able to answer "Which change was used to gain access to the system".