openstack-ossg team mailing list archive

[Matt Joyce <matt.joyce@xxxxxxxxxxxxxxxx>]

I was thinking we should / could compile a report after each release.  Sort
of, a state of security report.

I have begun working on one, and I'll send it to the list when it's ready
for some collaboration / review.

Currently I think we can make it pretty simple.

Some stats on vulnerabilities we've had in essex.  What overlapped in
folsom development.  A discussion of Design summit plans that are relevant
to OSSG, IE keystone pki, rbac, trusted rpc, ceilometer(?) etc.

Next release we could add some bells and whistles maybe.


Thoughts on this?

-Matt Joyce