Re: Ask for security contact without maintainers approval

[Manuel Ramón León Jiménez]

Already merged!

Thank you all.

On Wed, Nov 18, 2020 at 12:44 PM Baptiste Mathus  wrote:

> Adding Stefan in the thread, using the email I could find from the commits
> on the gradle plugin.
>
> @Stefan:
>
>- Do you still consider yourself a maintainer of the Jenkins Gradle
>plugin?
>- If so, can you review and approve
>https://github.com/jenkins-infra/repository-permissions-updater/pull/1708
>if fine?
>
> Thanks!
>
>
> Le mer. 18 nov. 2020 à 12:34, Manuel Ramón León Jiménez <
> manuel.ramon.leon.jime...@gmail.com> a écrit :
>
>> Hello.
>>
>> We, the *Foundation Security members* have filed several PRs to help on
>> addressing security vulnerabilities on several plugins. You can find them
>> with this filter:
>>
>> https://github.com/jenkins-infra/repository-permissions-updater/search?q=foundation_security_members_q=foundation_security_members
>>
>> We still have pending this one:
>> https://github.com/jenkins-infra/repository-permissions-updater/pull/1708
>> The current maintainers didn't answer so far.
>>
>> Do you agree to move forward and add us as security contact? We can help
>> in addressing security issues. We cannot commit to becoming maintainers
>> though.
>>
>> Specially to Security members: Daniel Beck and others.
>>
>> Thank you.
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "Jenkins Developers" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to jenkinsci-dev+unsubscr...@googlegroups.com.
>> To view this discussion on the web visit
>> https://groups.google.com/d/msgid/jenkinsci-dev/CAHHyvkN1TKwY-GQVZkO9RJ%2BKboN1jXiWoK69zs78B%2Bra%2ByWwXw%40mail.gmail.com
>> 
>> .
>>
> --
> You received this message because you are subscribed to the Google Groups
> "Jenkins Developers" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to jenkinsci-dev+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/jenkinsci-dev/CANWgJS5w6CEBKQD1RNeqoPx23hYSMnHGrXGaia4xrmX3St%2BOVQ%40mail.gmail.com
> 
> .
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/CAHHyvkPUcMabGYR6E380%3Dh5f-8Y_mA478tmufDPiggJvMvR_%2BA%40mail.gmail.com.

Re: Ask for security contact without maintainers approval

[Baptiste Mathus]

Adding Stefan in the thread, using the email I could find from the commits
on the gradle plugin.

@Stefan:

   - Do you still consider yourself a maintainer of the Jenkins Gradle
   plugin?
   - If so, can you review and approve
   https://github.com/jenkins-infra/repository-permissions-updater/pull/1708
   if fine?

Thanks!


Le mer. 18 nov. 2020 à 12:34, Manuel Ramón León Jiménez <
manuel.ramon.leon.jime...@gmail.com> a écrit :

> Hello.
>
> We, the *Foundation Security members* have filed several PRs to help on
> addressing security vulnerabilities on several plugins. You can find them
> with this filter:
>
> https://github.com/jenkins-infra/repository-permissions-updater/search?q=foundation_security_members_q=foundation_security_members
>
> We still have pending this one:
> https://github.com/jenkins-infra/repository-permissions-updater/pull/1708
> The current maintainers didn't answer so far.
>
> Do you agree to move forward and add us as security contact? We can help
> in addressing security issues. We cannot commit to becoming maintainers
> though.
>
> Specially to Security members: Daniel Beck and others.
>
> Thank you.
>
> --
> You received this message because you are subscribed to the Google Groups
> "Jenkins Developers" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to jenkinsci-dev+unsubscr...@googlegroups.com.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/jenkinsci-dev/CAHHyvkN1TKwY-GQVZkO9RJ%2BKboN1jXiWoK69zs78B%2Bra%2ByWwXw%40mail.gmail.com
> 
> .
>

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/CANWgJS5w6CEBKQD1RNeqoPx23hYSMnHGrXGaia4xrmX3St%2BOVQ%40mail.gmail.com.

Ask for security contact without maintainers approval

[Manuel Ramón León Jiménez]

Hello.

We, the *Foundation Security members* have filed several PRs to help on
addressing security vulnerabilities on several plugins. You can find them
with this filter:
https://github.com/jenkins-infra/repository-permissions-updater/search?q=foundation_security_members_q=foundation_security_members

We still have pending this one:
https://github.com/jenkins-infra/repository-permissions-updater/pull/1708
The current maintainers didn't answer so far.

Do you agree to move forward and add us as security contact? We can help in
addressing security issues. We cannot commit to becoming maintainers though.

Specially to Security members: Daniel Beck and others.

Thank you.

-- 
You received this message because you are subscribed to the Google Groups 
"Jenkins Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to jenkinsci-dev+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/jenkinsci-dev/CAHHyvkN1TKwY-GQVZkO9RJ%2BKboN1jXiWoK69zs78B%2Bra%2ByWwXw%40mail.gmail.com.