Reedy added a comment.
Thanks. I will note that advocating security bugs be published in public isn't the best. Especially when you refer to `(severe) security vulnerability`, and leaving it to peoples judgement. What counts as severe? Against what scale are we comparing? I would also generally advise on keeping issues on github open and then only using it for some stuff, while suggesting people file a bug here for other stuff. The barrier to entry to create an account here is a little higher, and is more work for people to report something. We can create a specific project on Phabricator for it if it's helpful for longer term maintenance and management. That's easily and trivially done. If this is to be deployed into Wikimedia production (I know, that's TBD and down the line), the canonical repo will need presumably moving to Gerrit, and therefore the issue tracker is not going to be GitHub. Also, for your instructions.... They need to create an account (via wikitech or Wikipedia et al), then find https://phabricator.wikimedia.org/maniphest/task/edit/form/75/ via the menu at the top... But using that form you can't add other projects initially, they have to save it, and then add them. This isn't obvious, but is done for specific reasons. It's also not clear where you want people to `Add Michaelcochez, Martaannaj and Wikidata to the issue`. We don't want #wikidata <https://phabricator.wikimedia.org/tag/wikidata/> adding as a subscriber, for example, which happens regularly (not specifically wikidata, but certainly adding random projects). It creates more work for people triaging bugs. And then "Security updates are only provided for the latest version of this project." - What's the latest version? There's no tags, no releases. So maybe you're meaning `HEAD` of the main branch? If it helps, and while it is intended and/or is deployed for Wikimedia purposes, reports could just be made to `[email protected]` like any other Wikimedia project. TASK DETAIL https://phabricator.wikimedia.org/T292110 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: Reedy Cc: sbassett, Michaelcochez, Martaannaj, Lydia_Pintscher, Addshore, WMDE-leszek, karapayneWMDE, Aklapper, Invadibot, Devnull, maantietaja, Akuckartz, Jcross, Dsharpe, DannyS712, Nandana, Lahi, Gq86, GoranSMilovanovic, QZanden, LawExplorer, _jensen, rosalieper, Scott_WUaS, Wikidata-bugs, aude, Bawolff, Mbch331, Legoktm
_______________________________________________ Wikidata-bugs mailing list -- [email protected] To unsubscribe send an email to [email protected]
