Annoyance is that it gets re-added once by Herald when removing it, plus Mukunda implied in https://phabricator.wikimedia.org/T162026#4293314 that it might be 'obsolete' (but not sure why).
Description
Description
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | • chasemp | T240490 Revamping Security-Team Work Intake and Flows | |||
| Resolved | • chasemp | T199688 Decide if H141 ("Add security tag when Security flag is set to Software security bug") is needed or not |
Event Timeline
Comment Actions
We are going to review the Security workflow soon (august or sept?) so I'll keep this in mind
Comment Actions
Obsolete because the security flag doesn't do anything anymore ever since we had the "protect as security issue" button in the sidebar.
Comment Actions
Ah, thanks.
Note to myself: See policy README for how stuff is supposed to work. Indeed it mentions removing the Herald rule.
Comment Actions
Fwiw its really convinent to me to have a tag that are security protected bugs are tagged with. It doesnt have to be named security but having a tag is nice.
Comment Actions
+1. I have disabled H141 for now. Let's see if anything explodes :)
(Thanks @mmodell)