Add a task template step to link the security issue to the internal release issue

Context

For the patch release process, there is automation to automatically create a security tracking issue and a release task issue. The security issues that contain the security MRs get automatically linked with the tracking issue. We can reference that tracking issue in other parts of our release automation to reference and action on the linked security issues and their MRs.

Currently for the internal release process, there's no tracking issue, only a release task issue.

Problem statement

Currently in our internal release automation, it's difficult/manual to reference the related security issue. The only context that it can easily get is the release task issue. We're planning on automating communication, following the availability of the internal release, and it should reference the actual security issue that's being addressed, instead of the release task issue.

The security issue should be linked to both the security patch tracking issue (done automatically), as well as the internal release task issue (manually for now).

As the first iteration, we should modify the release manager template to manually link the security issue to the task issue, before starting the internal release pipeline. This way the pipeline jobs can have reference to the security issue.

Proposal

Exit Criteria

  • The security issue should be linked to the internal release task issue prior to automation
Edited by Jenny Kim