How configuration-as-code eliminates invisible work for open source maintainers

This talk, presented by Lukas Pühringer from the Eclipse Foundation, covers how configuration-as-code significantly reduces invisible work for open source maintainers by automating repository governance and security. It addresses the operational challenges of managing secure and compliant open source projects, especially within large GitHub organizations, highlighting the risks associated with inconsistent configuration. The presentation introduces the Autodoc tool as a solution for defining repository settings, access controls, and security policies in version-controlled files, facilitating peer review and auditability through pull requests. By enforcing consistent security practices and addressing software supply chain threats, Autodoc enables scalable governance and reduces manual intervention in configuration management.