[03:44:47] 10GitLab (CI & Job Runners), 10Security Team AppSec, 10Security-Team, 10Security: Confirm with releng which docker images make the most sense to use - https://phabricator.wikimedia.org/T296805 (10sbassett) [12:13:55] 10GitLab (CI & Job Runners), 10Release-Engineering-Team, 10Security Team AppSec, 10Security-Team, 10Security: Confirm with releng which docker images make the most sense to use - https://phabricator.wikimedia.org/T296805 (10Aklapper) [15:14:44] 10GitLab (CI & Job Runners), 10Security Team AppSec, 10Security-Team, 10Security: Investigate SAST template options now included with Gitlab CE and formulate use-cases and documentation - https://phabricator.wikimedia.org/T294312 (10sbassett) 05In progress→03Resolved Let's call this done, for now. [15:14:47] 10GitLab (CI & Job Runners), 10Security Team AppSec, 10Security-Team, 10Security: Create initial proof of concept application security pipeline repository - https://phabricator.wikimedia.org/T289293 (10sbassett) [16:08:12] 10GitLab (CI & Job Runners), 10Security Team AppSec, 10Security-Team, 10Security: Create initial proof of concept application security pipeline repository - https://phabricator.wikimedia.org/T289293 (10sbassett) [16:08:32] 10GitLab (CI & Job Runners), 10Security Team AppSec, 10Security-Team, 10Security, 10user-sbassett: Finish node/npm initial tool ci templates for npm audit (Node 10, 12, 14) - https://phabricator.wikimedia.org/T294309 (10sbassett) 05In progress→03Resolved Let's call this one done for now. Current tem... [16:44:25] 10GitLab (CI & Job Runners), 10Security Team AppSec, 10Security-Team, 10Security, 10user-sbassett: Finish for node/npm initial tool ci templates for npm outdated (Node 10, 12, 14) - https://phabricator.wikimedia.org/T294310 (10sbassett) 05In progress→03Resolved Let's call this one done for now. Curr... [16:44:30] 10GitLab (CI & Job Runners), 10Security Team AppSec, 10Security-Team, 10Security: Create initial proof of concept application security pipeline repository - https://phabricator.wikimedia.org/T289293 (10sbassett) [16:44:41] 10GitLab (CI & Job Runners), 10Security-Team, 10serviceops, 10Patch-For-Review, and 2 others: Setup GitLab Runner in trusted environment - https://phabricator.wikimedia.org/T295481 (10Jelto) Deploy of puppet role `gitlab::runner` to `gitlab-runner1001` was successful. The runner showed up in GitLab Runner... [17:12:48] 10GitLab (CI & Job Runners), 10Security Team AppSec, 10Security-Team, 10SecTeam-Processed, 10Security: Create best practices / guidelines documentation for Gitlab application security ci templates - https://phabricator.wikimedia.org/T295374 (10mmartorana) a:03mmartorana [18:09:20] 10GitLab (CI & Job Runners), 10Security Team AppSec, 10Security-Team, 10Security: Create initial proof of concept application security pipeline repository - https://phabricator.wikimedia.org/T289293 (10sbassett) [18:09:28] 10GitLab (CI & Job Runners), 10Security Team AppSec, 10Security-Team, 10SecTeam-Processed, and 2 others: Finish node/npm initial tool ci templates for auditjs (Node 10, 12, 14) - https://phabricator.wikimedia.org/T294311 (10sbassett) 05Open→03Resolved Let's call this one done for now. Current template... [21:34:46] 10GitLab (CI & Job Runners), 10Security Team AppSec, 10Security-Team, 10SecTeam-Processed, and 2 others: Finish node/npm initial tool ci templates for auditjs (Node 10, 12, 14) - https://phabricator.wikimedia.org/T294311 (10sbassett) **Note:** there are some future work implications in T295508 for this now... [23:21:01] 10GitLab, 10Striker, 10Tools: Replace Diffusion integration with Gitlab integration in Striker (toolsadmin) - https://phabricator.wikimedia.org/T296893 (10bd808)