RE: [PHP-DEV] Security issue handling
| From: | Anatol Belski | Date: | Wed, 09 Nov 2016 23:43:37 +0000 |
| Subject: | RE: [PHP-DEV] Security issue handling | ||
| References: | 1 2 3 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-96801@lists.php.net to get a copy of this message | ||
Hi,
> -----Original Message-----
> From: Stanislav Malyshev [mailto:smalyshev@gmail.com]
> Sent: Saturday, November 5, 2016 8:13 PM
> To: Matteo Beccati <php@beccati.com>; PHP Internals
> <internals@lists.php.net>
> Subject: Re: [PHP-DEV] Security issue handling
>
> Hi!
>
> > On 24/10/2016 07:16, Stanislav Malyshev wrote:
> >> c. Get some specific people to volunteer to review patches in
> >> security repo regularly - how? Any takers?
> >
> > I'd be happy to help with reviewing and also setting up a private C.I.
> > to build and run the test suite regularly, if you think that's a good idea.
>
> I think it's a great idea, how could this be done? I'd be happy to run CI on
> security branch, it probably would remove 95% of the issues we had with merges.
>
At this point, what were our course of action? Seems there might be multiple tasks
- granting the willing devs security karma
- setting up a private CI
- organizing a security team
It probably would make sense, to make some plan on what is to be done, to come to the point.
Regards
Anatol