Skip to content

Change the way security implementation issues to be automatically closed

After https://gitlab.com/gitlab-com/gl-infra/delivery/-/issues/1074 and #1018 (closed), security merge requests targeting master will be merged when they're ready to be processed, backports will be merged during the security release.

Since we require on the security template to close the implementation issue if it's targeting master, security issues are automatically closed once the MR targeting master is merged. Since the backports are still opened this automatic process needs to change.

Proposal

  1. Disable "Automatically close security issues" for GitLab Security.
  2. Implement in release-tools automatically close the security implementation issues once the Security Release finishes
    • This can be the last step of the security release
  3. Update the security merge request template - https://gitlab.com/gitlab-org/gitlab/-/blob/master/.gitlab/merge_request_templates/Security%20Release.md#L26
  4. Update the documentation.

To do

Development log

Tests

/chatops run release close_issues --security --dry-run
/chatops run release close_issues --security

See test results #1106 (comment 403377145)

Follow ups:

  • Add a validation to prevent closing issues by merge-requests - #1169 (closed)
  • Print on slack what issues were closed -
Edited by Mayra Cabrera