Details
-
Suggestion
-
Resolution: Done
-
P2: Important
-
None
-
None
-
None
-
ec77bead3 (v3.8-based), 1ed01b4a1 (dev)
Description
See https://contribute.qt-project.org/quips/23
A bot should monitor for code changes to security-sensitive files. Take action on the following points:
- If a security header is modified, especially if severity is reduced
- If non-comment changes occur in the files
The bot should post a summary of changes to sensitive files to a teams channel.
The bot should add a "security_sensitive" hashtag to the change.
Attachments
For Gerrit Dashboard: QTQAINFRA-6431 | ||||||
---|---|---|---|---|---|---|
# | Subject | Branch | Project | Status | CR | V |
571834,21 | Say hello to the Qt Security Bot | dev | qtbots/qtsecuritybot | Status: MERGED | +2 | 0 |
607371,5 | Add UI plugin for commit message banner | v3.8-based | qtqa/gerrit-plugin-qt-workflow | Status: MERGED | +2 | 0 |