Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:96740 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 47282 invoked from network); 6 Nov 2016 09:47:52 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 6 Nov 2016 09:47:52 -0000 Authentication-Results: pb1.pair.com header.from=leight@gmail.com; sender-id=pass Authentication-Results: pb1.pair.com smtp.mail=leight@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.215.54 as permitted sender) X-PHP-List-Original-Sender: leight@gmail.com X-Host-Fingerprint: 209.85.215.54 mail-lf0-f54.google.com Received: from [209.85.215.54] ([209.85.215.54:36457] helo=mail-lf0-f54.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 60/90-33116-64CFE185 for ; Sun, 06 Nov 2016 04:47:51 -0500 Received: by mail-lf0-f54.google.com with SMTP id t196so93302136lff.3 for ; Sun, 06 Nov 2016 01:47:50 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=21n8N0TAcAY4aUwoBSMD1UPSbPPHmugaj41c2P00tiE=; b=VquEqYghaZZB9lWLjsSCcz5TZxFocMpLkUpc7Dl9VCW1haQKtjVvOvtfGyvlCZpCst D8hwVBJbGLODqdDIraYKdjJEYIzzi3/3vHvYUQtOsncKBhuCQocjaTU6YCYJwazUS644 PL7kt0iu31AjJyGcE3GPw0OFclDhpT7EtDQfR8V/6SGik/v+cOazWcbwvshOEVY3WMQX 0/0JW79RPwC7wgUdK5JsUPliD2vGk5qIwCKaC3PzjH9Qw9bphxluefzc/snqg1T+R7TG ss1naw4NHhWa0dcof5nx9RtY00dd+QVU6FyLXYV8NMXBShNSXTtayq023fc18XHb6lmF goKQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=21n8N0TAcAY4aUwoBSMD1UPSbPPHmugaj41c2P00tiE=; b=S5czSj4BKSAUEf1L7u1M/AbuviVbPt2V19Pk5tSS7ZT2RqeoRHT2DhTJjlsu4FC5yu c/pNIZFJ0FlDMGXrxbI9bg7Bmq4QUDYkVoAJNZKmx6/Wt3a/vtEd6GrtkRrm5KPNx2lW SXNItZkCmYqvwmSucbEuLSnLQ0WCyKOAdDNjeC2oSAUi3jJudvTPNt5aOLEl1qUtbWMB TsKvdtETesP0WmficvCxbfNGTg+0PeH1TRm8lTCzB3vNWju2Nd3bHIrVgomW1pZg1Ams v5ky7GMd+dZs42OY3ZXihdaleKruWyIUzv8DW6/xZC8Aw0eJpaHdBTTARq6OiA2yGn0n WYkw== X-Gm-Message-State: ABUngvcyX8kcHkbxZdHS2hBHgbTY4lMEbhgotekxgSdAUlYC6hefZJ9WKZA5HVIjoiaZ9XH01/58UxI9x+UbaA== X-Received: by 10.25.209.211 with SMTP id i202mr833618lfg.117.1478425666689; Sun, 06 Nov 2016 01:47:46 -0800 (PST) MIME-Version: 1.0 References: <3a5408bc-b71d-920c-45e4-b9be02350b6c@gmail.com> <3214aa0e-cb6f-e90b-9d4a-7d9b6236bd6e@gmail.com> In-Reply-To: <3214aa0e-cb6f-e90b-9d4a-7d9b6236bd6e@gmail.com> Date: Sun, 06 Nov 2016 09:47:36 +0000 Message-ID: To: Stanislav Malyshev , Matteo Beccati , PHP Internals Content-Type: multipart/alternative; boundary=001a114126d0b0a39b05409eccd9 Subject: Re: [PHP-DEV] Security issue handling From: leight@gmail.com (Leigh) --001a114126d0b0a39b05409eccd9 Content-Type: text/plain; charset=UTF-8 On Sat, 5 Nov 2016 at 19:13 Stanislav Malyshev wrote: > Hi! > > > On 24/10/2016 07:16, Stanislav Malyshev wrote: > >> c. Get some specific people to volunteer to review patches in security > >> repo regularly - how? Any takers? > > > > I'd be happy to help with reviewing and also setting up a private C.I. > > to build and run the test suite regularly, if you think that's a good > idea. > > I think it's a great idea, how could this be done? I'd be happy to run > CI on security branch, it probably would remove 95% of the issues we had > with merges. > Travis can be run in local docker containers, so given the infrastructure to run the container, it shouldn't be a problem to use the existing travis configuration for private CI --001a114126d0b0a39b05409eccd9--