Hi everyone,

As those of you who were at the recent contributor’s meeting are aware, we’re 
planning to launch a PlayStation EWS in the near future!

We’ve had post-merge buildbots running for years, but we’ve not been able to 
have an EWS until now due to the potential for malicious PRs.
As such, this EWS will involve a new feature: it will only run when the PR 
author is in some sense a “known contributor”.
Specifically, our current plan is to check that the GitHub user belongs to the 
committers<https://github.com/orgs/WebKit/teams/committers> team.
This is an imperfect definition, but it allows the EWS to be as secure as a 
post-merge buildbot, by letting “mergeable” imply “non-malicious”.

If you have any questions or comments, please feel free to reach out here or on 
Slack!

Thanks,
Ross


_______________________________________________
webkit-dev mailing list
webkit-dev@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-dev

Reply via email to