You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@magpie.apache.org by "potiuk (via GitHub)" <gi...@apache.org> on 2026/10/20 11:35:19 UTC
[I] security-issue-import: Step 1 pre-filter misses ASF CNA bookkeeping mails [magpie]
potiuk opened a new issue, #1735:
URL: https://github.com/apache/magpie/issues/1735
Pre-filter rule 2 drops `cve-tool-bookkeeping` only when every message comes from `<security-list>`. On an ASF adopter, every "CVE-YYYY-NNNNN reserved for <pmc>" mail arrives from `security@apache.org` and every "Comment added on CVE-…" from the reviewing ASF Security member's address — 13 of 13 in a 14-day window — so none were pre-filtered and all reached later steps.
Suggest a configurable `cve_tool_senders` default for the ASF organization (`security@apache.org` plus the CNA reviewers), and matching the subject shapes regardless of sender when the sender is the configured CNA.
🤖 Generated with [Claude Code](https://claude.com/claude-code)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@magpie.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] security-issue-import: Step 1 pre-filter misses ASF CNA bookkeeping mails [magpie]
Posted by "arin30 (via GitHub)" <gi...@apache.org>.
arin30 commented on issue #1735:
URL: https://github.com/apache/magpie/issues/1735#issuecomment-6297905149
I’ve reproduced this and have a tested fix ready. It adds the ASF organization default, lets setup collect the current CNA reviewer addresses without guessing them, and includes regression coverage for reservation and reviewer-comment messages. I’ll open the PR shortly.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@magpie.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] security-issue-import: Step 1 pre-filter misses ASF CNA bookkeeping mails [magpie]
Posted by "potiuk (via GitHub)" <gi...@apache.org>.
potiuk closed issue #1735: security-issue-import: Step 1 pre-filter misses ASF CNA bookkeeping mails
URL: https://github.com/apache/magpie/issues/1735
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@magpie.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org