andreahlert commented on PR #147: URL: https://github.com/apache/airflow-steward/pull/147#issuecomment-4594588806
@potiuk thanks for the thorough audit. A few updates since you ran this: P3 + P12 (HOLD, not gap): The security genericization series is complete — #381 through #399 (PR1-PR5) are all merged. The ASF-coupled assumptions are now config-driven placeholders. setup-steward's self-references to apache/airflow-steward are legitimate per P12's carve-out for the framework's own repo. P14 (still GAP, but shrinking): #410 already landed and slimmed security-issue-sync from 3425 to 658 lines. The remaining overshoots are queued for split. Validator line-count check comes in a follow-up PR once the bulk of splits land. P0 / P8 / P1-P16: Agree on all counts. P0 (injection-guard blind spot) and P8 (missing evals) are quick wins I'll pick up next. P1/P16 audit logging is the bigger pre-release item — tied to RFC-AI-0004 implementation, not this PR. Does the updated P3/P12 state look right to you? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
