As a criterion for exiting incubation we need clear documentation for how to 
report Metron issues.  What do you think about this?

If you find issues with Metron please report them to the Metron community.  
Please report all developer-level issues to [email protected].  
Examples of developer issues would be:
Project fails to compile or is failing unit or integration tests
Project or individual components fail to install in my environment
There are error messages in my logs
I need help with coding or extending a specific component
etc...

If you are an end-user of the product and have a comment or question then use 
[email protected]
I don't understand the UI, what does button x do?
What should the output of function x be?
It would be nice if I had feature x along with feature y
etc...

If you found a security-related issue, please report immediately to 
[email protected]. DO NOT FILE A JIRA, DO NOT POST ON ANY 
OTHER BOARD
I can get access to data I should not have access to
I have privileges to do things I should not be allowed to do
I found that this project is susceptible to an exploit 
etc...

Please report issues related to the JIRA/Wiki to 
[email protected]
I don't have access to create/assign JIRAs to myself
I don't have visibility/access to certain JIRA featuers
I can't create or view a wiki entry
etc....


------------------- 
Thank you,

James Sirota
PPMC- Apache Metron (Incubating)
jsirota AT apache DOT org

Reply via email to