| yasufum | Hi, tacker team. | 08:00 |
|---|---|---|
| shivam | Hi | 08:01 |
| yasufum | hi | 08:01 |
| takahashi-tsc | hi | 08:02 |
| yasufum | #startmeeting tacker | 08:02 |
| opendevmeet | Meeting started Mon Jul 27 08:02:30 2026 UTC and is due to finish in 60 minutes. The chair is yasufum. Information about MeetBot at http://wiki.debian.org/MeetBot. | 08:02 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 08:02 |
| opendevmeet | The meeting name has been set to 'tacker' | 08:02 |
| yasufum | Hi | 08:02 |
| yasufum | #link https://etherpad.opendev.org/p/tacker-meeting | 08:02 |
| yasufum | So, let's start today's meeting. | 08:03 |
| yasufum | The first topic is request for review. | 08:04 |
| yasufum | I've uploaded some other patches in addition to on the list on etherpad. | 08:05 |
| yasufum | Thank you guys for reviewing for these patches. | 08:05 |
| yasufum | Unfortunately, something failure happened on zuul test recently | 08:06 |
| yasufum | and we cannot merge any patch. | 08:06 |
| yasufum | I'm going to fix it, asking again to review then. | 08:07 |
| yasufum | Thanks. | 08:07 |
| yasufum | Any comment? | 08:07 |
| takahashi-tsc | thanks | 08:08 |
| yasufum | ok, thanks. | 08:08 |
| yasufum | Let's move on to the second topic. | 08:08 |
| yasufum | #topic Formation of a Tacker Core Security Group (VMT) for Security Issue Handling | 08:09 |
| yasufum | Thank you for taking the responsibility. | 08:09 |
| yasufum | shivam: Could share your proposal and discussion points briefly? | 08:10 |
| shivam | yes | 08:10 |
| shivam | This discussion topic is related to Formation of a Tacker Core Security Group (VMT) for handling security related issues in Tacker. | 08:11 |
| shivam | The proposal suggests creating a dedicated Tacker Vulnerability Management Team (VMT) to handle security issues in a more organized, efficient and confidential way. | 08:12 |
| shivam | It is proposed because a recent security report showed that Tacker currently lacks a formal team to coordinate vulnerability handling efficiently. | 08:13 |
| shivam | The VMT would act as the main point of contact for receiving, investigating, and managing all security-related reports. | 08:14 |
| shivam | The team would include Primary Members to lead and coordinate security issues, and Secondary Members to assist with investigation, testing, and developing fixes. | 08:15 |
| shivam | Both primary and secondary members would work together to validate vulnerabilities, assess their impact, prepare fixes, and coordinate responsible disclosure following the OpenStack security process. | 08:16 |
| shivam | Primary Members can also assign specific security issues to VMT secondary members based on their expertise and availability for efficient resolution. | 08:17 |
| shivam | The proposal also recommends reviewing the team's membership periodically to ensure it remains active and responsive. | 08:18 |
| shivam | Finally, I would like to know opinion of the Tacker community on the proposed approach for establishing a Tacker Vulnerability Management Team (VMT)/Core Security Group. | 08:19 |
| shivam | Additionally, I request community members to confirm if they are interested in joining the Tacker VMT/CoreSec group. | 08:19 |
| shivam | Thank you. | 08:19 |
| yasufum | thanks | 08:21 |
| yasufum | Any comment? | 08:21 |
| yasufum | Unfortunately, I might not able to make contributes so much, but still want to help sometimes as a secondary member. | 08:23 |
| shivam | ok, thank you for your confirmation to join the group as a secondary member. | 08:26 |
| shivam | I would request other members as well if they can confirm their interest in joining the VMT. | 08:27 |
| yasufum | OK | 08:28 |
| yasufum | Let's continue to discuss then, thanks. | 08:28 |
| takahashi-tsc | At least, I will be primary member, and if somoone can help us, it is very helpful. | 08:28 |
| yasufum | OK, thanks. | 08:29 |
| yasufum | So, there is no update on the third topic. | 08:30 |
| yasufum | Let's close this meeting if no other discussion. | 08:30 |
| yasufum | Thank you for joining. | 08:30 |
| yasufum | Bye! | 08:30 |
| shivam | Thank you, bye. | 08:31 |
| yasufum | #endmeeting | 08:31 |
| opendevmeet | Meeting ended Mon Jul 27 08:31:51 2026 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 08:31 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/tacker/2026/tacker.2026-07-27-08.02.html | 08:31 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/tacker/2026/tacker.2026-07-27-08.02.txt | 08:31 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/tacker/2026/tacker.2026-07-27-08.02.log.html | 08:31 |
Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!