[tahoe-lafs-trac-stream] [tahoe-lafs] #2052: Automate testing of merge requests to streamline review.
tahoe-lafs
trac at tahoe-lafs.org
Tue Aug 27 04:34:49 UTC 2013
#2052: Automate testing of merge requests to streamline review.
--------------------------+-----------------------------------------
Reporter: nejucomo | Owner: daira
Type: defect | Status: new
Priority: normal | Milestone: undecided
Component: unknown | Version: 1.10.0
Resolution: | Keywords: dev-infrastructure buildbot
Launchpad Bug: |
--------------------------+-----------------------------------------
Comment (by zooko):
I disagree — I think that it will be very valuable to have the buildbot
give feedback to patch-writers automatically, without requiring (much)
manual effort on the part of a reviewer.
I also don't think the security risks are dangerous. As long as the
buildslave is running only code that has been indelibly committed to a
publicly visible repository, then I don't think there is a lot of risk of
an attacker going to all the effort of making a trojan patch and
submitting it, in order to take over a buildslave. If that happened, it
would be very interesting! It would be worth losing a buildslave (or a VM
or whatever) just to see that happen.
--
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2052#comment:9>
tahoe-lafs <https://tahoe-lafs.org>
secure decentralized storage
More information about the tahoe-lafs-trac-stream
mailing list