Brandon Lum

it looks like this is all codified now in the CI, @jeffmendoza does this issue change to just having something in the readme to point to the github workflow?

I feel like we should be able to satisfy the case through traversal, of course subject to being able to distinguish what we're looking for like in the #594 ....

close from inactivity

@jlk i remembered that you had a retrospective + slides on this effort, would you be able to add these to the repo as a PR? Thanks.

I think we can put this under `assessments/security-pals/*.md` that should be good

Mainly used just by myself , closing this since its no longer used in lieu of meeting notes already recording it.

This was floated around and discussed and folks seemed to prefer not to have additional process around triage then.

I'll defer to @JPEWdev on this since they're closer to the problem

This would be cool. I wonder if there's a supported output format that we can depend on here. @djm-google I think they'd probably be able to attach onto packages.

I had a chat with @jessmcclintock from capslock, and some interesting use cases came up. One of the interesting one besides the capaibilities is the ability for capslock to gather...