Open Bug 1598748 Opened 5 years ago Updated 5 years ago

[lando-ui] Include the sec-approval form answers in Phabricator

Categories

(Conduit :: Lando, task, P2)

Tracking

(Not tracked)

People

(Reporter: mars, Unassigned)

References

(Blocks 1 open bug)

Details

(Keywords: conduit-triaged)

Attachments

(1 file)

As a sec-approval team member viewing a sec-approval request in Phabricator I want to be presented with the author's sec-approval Request Form answers in a directly accessible location, such as the Phabricator sec-approval request comment body, so that I can approve the request quickly.

From https://wiki.mozilla.org/Security/Bug_Approval_Process#Requesting_sec-approval

    [Security approval request comment]
    How easily can the security issue be deduced from the patch?
    Do comments in the patch, the check-in comment, or tests included in the patch paint a bulls-eye on the security problem?
    Which older supported branches are affected by this flaw?
    If not all supported branches, which bug introduced the flaw?
    Do you have backports for the affected branches? If not, how different, hard to create, and risky will they be?
    How likely is this patch to cause regressions; how much testing does it need?

See the uplift request form implementation for how this could be done.

Assignee: nobody → mars
Status: NEW → ASSIGNED
Assignee: mars → nobody
Status: ASSIGNED → NEW
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: