Page MenuHomePhabricator
Create Task
Maniphest T271479

Discuss security review time needs with the Security team
Closed, ResolvedPublic
Actions

Description

It is a waste of time for Security to review a project that is heavily work in progress, but it also takes time for them to do a review and they have a high request to available time ratio. Read there guidance on wiki and then reach out to make sure they are aware that we are hoping for a prod deploy in June.

Related Objects
Search...

Event Timeline

bd808 created this task.Jan 7 2021, 10:30 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptJan 7 2021, 10:30 PM
bd808 triaged this task as Medium priority.Jan 7 2021, 10:39 PM
bd808 added a parent task: T271483: Complete and announce initial production deployment of Toolhub.
bd808 added a comment.Jan 27 2021, 1:49 AM

After reading the instructions at https://www.mediawiki.org/wiki/Security/SOP/Security_Readiness_Reviews I have filed T273020: Security Readiness Review For Toolhub to get us inline for review and prioritization.

bd808 claimed this task.Jan 27 2021, 7:01 PM
bd808 edited parent tasks, added: T273020: Security Readiness Review For Toolhub; removed: T271483: Complete and announce initial production deployment of Toolhub.
bd808 moved this task from Research needed to In Progress on the Toolhub board.
Restricted Application added a project: User-bd808. · View Herald TranscriptJan 27 2021, 7:02 PM
bd808 added a project: Developer-Advocacy (Jan-Mar 2021).Jan 27 2021, 7:02 PM
bd808 closed this task as Resolved.Feb 5 2021, 10:05 PM
bd808 added a subscriber: • Jcross.
In T273020#6807181, @Jcross wrote:

@bd808 we have placed you in queue for next quarter, with work expected to begin in May for a late June launch date. Please note that all relevant code should be in a production-ready state (close to deployment with low volatility) to maintain this estimated timeline per our SOP: https://www.mediawiki.org/wiki/Security/SOP/Security_Readiness_Reviews

Please feel free to contact us with any questions, and we will be in touch as your review date draws closer.

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL