Wikimedia Security Team/Security Review Scrum/2019-04-23

Date/time: April 23rd, 2019 - 10:00 AM PST

Attending: Brian, Sam, Michal Anna, Scott

Updates:

Backlog

• Exploring outsourced reviews for OIT things, rewrites, JB to follow up, stalled - https://phabricator.wikimedia.org/T155537, https://phabricator.wikimedia.org/T156960, https://phabricator.wikimedia.org/T148246, https://phabricator.wikimedia.org/T187846
• Exploring Kask review options, JB to follow up, stalled - https://phabricator.wikimedia.org/T219831
• Enwiki CU concept review, assigned to Sam for now, next - https://phabricator.wikimedia.org/T221719
• Closed out Vega lib in Frozen, resolved completed - https://phabricator.wikimedia.org/T172938
• Closed out WikibaseSchema, resolved completed - https://phabricator.wikimedia.org/T216692
• Planet Wikimedia - assigned to Michal Anna, next - https://phabricator.wikimedia.org/T207246
• DoubleWiki, Brian to deploy as sec release, then push through gerrit, in-progress - https://phabricator.wikimedia.org/T131199

Active

• Wikibase Termbox, to be completed by April 26th, in-progress - https://phabricator.wikimedia.org/T216419
• Wikisource ext, starting - https://phabricator.wikimedia.org/T217289
• FormWizard extension, stalled - https://phabricator.wikimedia.org/T201492
• Labs db/sanitarium and maintain-views.yaml audits, in-progress - https://phabricator.wikimedia.org/T169097, https://phabricator.wikimedia.org/T103011
• Audiences concept reviews, stalled - https://phabricator.wikimedia.org/T220242, https://phabricator.wikimedia.org/T220043