sbassett added a comment.
> Hello security team, it would be great if we can have a comment on this ticket on whether it's okay to have it on github or not. We are planning to deploy this to production as a static site. @Ladsgroup @Michael - we'll chat about this as a team at our clinic meeting this Monday, but I don't think we'd have too many security concerns (at least I don't) about canonically hosting Wikimedia-related repos at github, since we already do that for a handful of repos anyways (service-template-node et al). I believe there is a preference to use gerrit for canonical Wikimedia-related repos, but there's no official policy governing this AFAIK, and as long as best practices around development, CI and security issues are being followed, that should be fine. Finally - this will all change once projects begin migrating to Gitlab over the next year or so. TASK DETAIL https://phabricator.wikimedia.org/T272130 EMAIL PREFERENCES https://phabricator.wikimedia.org/settings/panel/emailpreferences/ To: sbassett Cc: sbassett, Michael, Ladsgroup, Jakob_WMDE, DannyS712, Aklapper, Lydia_Pintscher, Devnull, Akuckartz, Dsharpe, Nandana, Lahi, Gq86, GoranSMilovanovic, QZanden, EBjune, LawExplorer, _jensen, rosalieper, Scott_WUaS, Wong128hk, Luke081515, Wikidata-bugs, aude, Bawolff, csteipp, Mbch331, Rxy, Jay8g, Krenair, chasemp
_______________________________________________ Wikidata-bugs mailing list Wikidata-bugs@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs
