[Openstack-security] Security Note (OSSN) Process

Thierry Carrez thierry at openstack.org
Sat Jan 18 13:46:30 UTC 2014


Bryan D. Payne wrote:
> A couple of thoughts...
> 
> * I like the idea of storing these in git.
> * Perhaps including a date in the numbering of the OSSN is not needed?
>  Could we just number them sequentially?
> 
> OSSN-0001
> OSSN-0002
> etc.
> 
> If we use git and number sequentially, then it would be easy to just
> grab the next number when writing a new OSSN.  I also really like the
> idea of doing the reviews in gerrit rather than launchpad / email.

+1, nice and simple, and sufficiently different from OSSA numbering so
that they do not get confused.

-- 
Thierry Carrez (ttx)




More information about the Openstack-security mailing list