[tahoe-lafs-trac-stream] [tahoe-lafs] #2052: Automate testing of merge requests to streamline review.

tahoe-lafs trac at tahoe-lafs.org
Tue Aug 27 04:34:49 UTC 2013


#2052: Automate testing of merge requests to streamline review.
--------------------------+-----------------------------------------
     Reporter:  nejucomo  |      Owner:  daira
         Type:  defect    |     Status:  new
     Priority:  normal    |  Milestone:  undecided
    Component:  unknown   |    Version:  1.10.0
   Resolution:            |   Keywords:  dev-infrastructure buildbot
Launchpad Bug:            |
--------------------------+-----------------------------------------

Comment (by zooko):

 I disagree — I think that it will be very valuable to have the buildbot
 give feedback to patch-writers automatically, without requiring (much)
 manual effort on the part of a reviewer.

 I also don't think the security risks are dangerous. As long as the
 buildslave is running only code that has been indelibly committed to a
 publicly visible repository, then I don't think there is a lot of risk of
 an attacker going to all the effort of making a trojan patch and
 submitting it, in order to take over a buildslave. If that happened, it
 would be very interesting! It would be worth losing a buildslave (or a VM
 or whatever) just to see that happen.

-- 
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/2052#comment:9>
tahoe-lafs <https://tahoe-lafs.org>
secure decentralized storage


More information about the tahoe-lafs-trac-stream mailing list