Skip to content

Opt out Vulnerability Research

Mark Art requested to merge mark.art-master-patch-80525 into master

What does this MR do and why?

The MR opts out the Vulnerability Research group from triage ops. VR is not a product team and thus all the past weekly reports were either false-positives or had no actual value. When a new product issue is raised, it is done so in various product groups in Sec. If an issue relates to the work that VR has completed, traditionally, it would be raised by the product teams and VR brought in for help/resolution.

Expected impact & dry-runs

These are strongly recommended to assist reviewers and reduce the time to merge your change.

See https://gitlab.com/gitlab-org/quality/triage-ops/-/tree/master/doc/scheduled#testing-with-a-dry-run on how to perform dry-runs.

Action items

  • (If applicable) Add documentation to the handbook pages for Triage Operations =>
  • (If applicable) Identify the affected groups and how to communicate to them:
    • /cc @person_or_group =>
    • Relevant Slack channels =>
    • Engineering week-in-review

Merge request reports