5 Apr
2024
5 Apr
'24
7:42 a.m.
On 2024-04-05 10:00:46 -0400 (-0400), Brian Rosmaita wrote:
The “Cinder Core security contacts” team [0] is a proper subset of the cinder core team who are notified when the OpenStack VMT assigns a private security bug to cinder following the vulnerability management process [1]. The VMT prefers that this group be kept small, so often adding someone entails removing someone else. [...] If you have any comments or concerns, please reply on the mailing list before 12:00 UTC Friday 12 April 2024.
No concerns from me (VMT hat squarely on), but I did want to comment that I really appreciate you reviewing/refreshing that group and encourage all other project teams to do the same with some regularity. Thanks! -- Jeremy Stanley