> am I missing something in this thread security reports?
currently they are all triaged by the security team so the team can track disclosure deadlines etc. how would that worknif the plugin is usimg GH issues? (yes I know gh issues can now handle security reports but does that mean the security team members need admin on all plugin repos, are they supposed to be watching more places for reports etc) /James -- You received this message because you are subscribed to the Google Groups "Jenkins Developers" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-dev+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-dev/7edfc904-18b1-4b99-9301-930dee549cd0o%40googlegroups.com.