Contrib.social

Automatic Updates Initiative meeting on Jan 24, 2023

Open on Drupal.org →
Created on 10 January 2023, over 1 year ago
Updated 26 May 2023, about 1 year ago

Transcript

0️⃣ Who is here today? Comment in the thread below to introduce yourself and tell us why you are joining us.

2️⃣ Some good news - we're in the second round of a grant funding process to try and secure some more support for things like additional dev time from Consensus, and (hopefully) pen-testing.

3️⃣ There's been a lot of activity recently! Let's use this thread for AutoUpdates module itself...

4️⃣ And this one to talk about php-tuf!

5️⃣ What feels like everyone's most important next step?

6️⃣ @xjm (re sleep just posting for another time)I had a question about the scope of the full review that will be need for AUI  and when that could be done.Will the full security review include all the code that generates the TUF artifacts as part of the packaging pipeline on the drupal.org server side, including https://gitlab.com/rugged/rugged? I also assume there would at least be some non-public configuration(maybe code) outside of Rugged.Or will the full review be limited to TUF artifacts that the drupal.org server side provides and the client code that ships with drupal (either directly or as a composer dependency) and interacts with those artifacts?Wondering because this question probably determines when we can consider TUF server side portion done as far the AutoUpdates system being in place where it can be ready for a reviewhGitLabRugged / Rugged · GitLabAn opinionated implementation of The Update Framework (TUF). Originally developed for, and sponsored by, the Drupal Association. For more information, visit the

📌 Task
Status

Fixed

Version

2.0

Component

Meetings

Created by

🇺🇸United States hestenet Portland, OR 🇺🇸

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

contrib.social Blog FAQ Discussions
Production build 0.69.0 2024