Move GitLab security issue triage project to hide issue counts

Created on 4 June 2025, 3 days ago

Problem/Motivation

I had set up https://git.drupalcode.org/security to be a public group, so that it could contain a public project for security issue triage, that would be the inbox for security issues until all projects have their issues migrated to git.drupalcode.org and can use confidential issues. This led to the unanticipated GitLab behavior making issue counts for milestones public, https://gitlab.com/gitlab-org/gitlab/-/issues/537721. Security advisory planned release dates can change for various reasons, and out of an abundance of caution, we donโ€™t want to publicize the schedule.

Proposed resolution

  • Make the security group private
  • Create a new group that will be public
  • Move the issue triage project into that group
  • Give the security team access to the project
  • Update integrations to watch the new location
  • Update documentation
๐Ÿ“Œ Task
Status

Active

Version

1.0

Component

Security advisories

Created by

๐Ÿ‡บ๐Ÿ‡ธUnited States drumm NY, US

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Production build 0.71.5 2024