Re: Correctly configuring Apache Commons components for oss-fuzz

2022-11-20 Thread Oliver Chang
Hi Mark, Thanks for the early feedback. Re a), unfortunately I'm not aware of an easy way to do this with our current bug tracking system (Monorail). If it's an important feature to have, one way to achieve this may be to set up a separate " security-oss-fuzz-not...@commons.apache.org" group or

Re: Correctly configuring Apache Commons components for oss-fuzz

2022-11-20 Thread Mark Thomas
Hi Oliver, The following are a couple of (hopefully) low hanging fruit that will smooth a couple of rough edges. These aren't the biggest issues - just something to get started with. a) It would be very helpful if there was an option to enable sending of notifications for your own