Translation es

[leonelquinteros]

Hi, I found this resources super helpful and I would like non-english speakers to be able to benefit from this as well.

Do you have translation projects or do you accept translation PRs?
I see the sources are in 2019/en, so I guess I could create a 2019/es for a Spanish translation to work in.

Would that be something you'd want/like? I'm willing to make the Spanish translation, but let me know if there is an established way to contribute on this matter (maybe there is a separated repo for translations or you already have a Spanish version that I couldn't find.

[PauloASilva]

Hi @leonelquinteros,
I share your vision about translations.

OWASP API Security Top 10 translations are more than welcome but I suggest you
to wait for the stable release: it should be announced in OWASP Global AppSec
Amsterdam on Sept 26th.

You got it right: Spanish translation should come into the 2019/es/ directory.
We didn't receive any other request/contact for translations to Spanish, so I
think you're on the lead.

Give me a few days to check how to take advantage of GitHub Projects to manage
translation efforts.

Cheers,
Paulo A. Silva

[leonelquinteros]

@PauloASilva Sounds like a plan!

I'll look forward for updates on this issue and we'll follow up from there.

[shekodn]

Any updates @leonelquinteros ? I can help with the Spanish translation :D

[PauloASilva]

Hi guys,
I checked GitHub projects but I am not sure it'll help managing translation efforts. I don't think it will be possible to give external contributors permission to create new cards and manage their progress.

For now I think we can do it with one issue per translation effort, using a standardized title (e.g. "Translation es-ES", "Translation pt-PT") and the "translation" label. The issue will be assigned to the translation effort leader.

What do you think?

Cheers,
Paulo A. Silva

[ErezYalon]

@PauloASilva, by "translation effort" you mean "new language"?

[psiinon]

FYI for ZAP we use Crowdin: https://crowdin.com/project/owasp-zap
We have tooling that pushed our English translations to Crowdin and also pulls translations back and submits them as PRs. Probably not reusable by other projects I'm afraid as they are very ZAP specific, but just so you know its possible.

[PauloASilva]

@PauloASilva, by "translation effort" you mean "new language"?

@ErezYalon Yes, plus if a translation get stalled we can replace the leader.

[PauloASilva]

FYI for ZAP we use Crowdin: https://crowdin.com/project/owasp-zap
We have tooling that pushed our English translations to Crowdin and also pulls translations back and submits them as PRs. Probably not reusable by other projects I'm afraid as they are very ZAP specific, but just so you know its possible.

I've used it before for another OWASP documentation project (OWASP Testing Guide 4.0) but it didn't make it easier, particularly due to:

• lack of context: translating small sentences without context makes it hard to get a fluent reading.
• lack of reviewers: because each sentence needs to be reviewed to be approved the translation got stalled.

I think Crowdin may work fine for software internationalization since most of the text should be short sentences like prompts and tooltips. For documentation projects, specially those with space constraints like Top 10, I am not sure (based on my previous experience).

I led the OWASP Top 10 2017 pt-pt translation and it went smooth:

• each section (markdown) was assigned to a contributor
• once the section translation was finished a PR was opened to the translation branch
• PRs were reviewed and merged by the translation leader
• when all sections were translated the template was updated by the translation leader and a PR was opened to the official repository.

I think this workflow may work for the OWASP API Security Top 10, but we can leave it to the "translation leader" to decide how to do it.

BTW, before someone asks, why pt-pt and not only pt?
In the past we tried an all-in-one pt-pt and pt-br OWASP Secure Coding Practices Quick Reference Guide translation, but the outcome was not as good as we expected. Although both countries speak Portuguese, we have different idiomatic expressions.

I believe that experience makes us avoid past mistakes and get time to experience new ones (aka get more experienced).

Cheers,
Paulo A. Silva

[leonelquinteros]

@PauloASilva Whenever you're ready to start, feel free to assign the Translation issue to me and I'll start working on it.

If that happens, I'll be happy to get help from @shekodn during the process, we can align our work in the corresponding issue later.

I guess we can come up with a quick translation document in the beginning and open to reviewers and corrections from there.

The PRs process Paulo mentioned to organize this work sounds good for me.

Cheers!

[PauloASilva]

Hi @leonelquinteros,
The issue was assigned to you.

Please clone the repo and create a translation/es-es branch from the master.
Once you get the translation done, please open a PR from translation/es-es to our master.

Thank you both!
Paulo A. Silva