On Tue, Jan 17 2017, Adam Heczko wrote: > Hi Julien, I think that you should follow this [1] workflow. > > TL;DR: Pls make sure that if the bug is serious make it private on LP so > that only core team members can access it and propose patches. Please do > not send patches to Gerrit review queue but rather attach it to LP bug > ticket and discuss there. Contact VMT members to get more details on how to > get Telemetry project covered by VMT. > > [1] https://security.openstack.org/vmt-process.html
IMHO that's a problem. The page is so long and the process so complex that if nobody has the time to do all of that, it'll never be fixed or I'll just send the patch to Gerrit to get it fix and be done with it. At first glance Telemetry matches all requirements to get covered by VMT. IIRC last time we asked for it we get punted because there was already too much work for the VMT team. But if that's possible, we'd be glad to apply again. :-) -- Julien Danjou # Free Software hacker # https://julien.danjou.info
signature.asc
Description: PGP signature
__________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
