| From: | Jelte Fennema-Nio <postgres(at)jeltef(dot)nl> |
|---|---|
| To: | Yura Sokolov <y(dot)sokolov(at)postgrespro(dot)ru> |
| Cc: | PostgreSQL Hackers <pgsql-hackers(at)lists(dot)postgresql(dot)org>, Magnus Hagander <magnus(at)hagander(dot)net>, Jacob Brazeal <jacob(dot)brazeal(at)gmail(dot)com>, Jacob Champion <jacob(dot)champion(at)enterprisedb(dot)com>, Andreas Karlsson <andreas(at)proxel(dot)se>, Andres Freund <andres(at)anarazel(dot)de> |
| Subject: | Re: New process of getting changes into the commitfest app |
| Date: | 2025-01-27 08:54:04 |
| Message-ID: | CAGECzQR_AOGwfV9ftjTKFEgCfgXMV_T0-3m0pXb3eu3vn6U47Q@mail.gmail.com |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
On Sun, 26 Jan 2025 at 19:09, Yura Sokolov <y(dot)sokolov(at)postgrespro(dot)ru> wrote:
> Given history of libxz backdoor, I'd fear to give "commit access" for
> anything critical to rather fresh member of community.
That's definitely a valid concern in the general case, but I wouldn't
call myself a fresh member of the community. I've been the primary
maintainer of the PgBouncer repo for ~2 years now and I also have
commit access to the cfbot repo. So *if* I wanted to add backdoor in
some critical infrastructure I wouldn't need access to the commitfest
app repo to do that. I also rank relatively high on Robbert's yearly
stats list[1].
[1]: http://rhaas.blogspot.com/2025/01/who-contributed-to-postgresql.html
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Amit Kapila | 2025-01-27 08:57:40 | Re: create subscription with (origin = none, copy_data = on) |
| Previous Message | Andrei Lepikhov | 2025-01-27 08:52:16 | Re: POC, WIP: OR-clause support for indexes |