Gentoo Archives: gentoo-dev

From: Aaron Bauman <bman@g.o>
To: gentoo-dev@l.g.o
Subject: Re: [gentoo-dev] A feedback about the CI bug reporting system
Date: Fri, 06 Nov 2020 15:37:53
Message-Id: 20201106153746.GC416449@samurai
In Reply to: Re: [gentoo-dev] A feedback about the CI bug reporting system by "Michał Górny"
1 On Fri, Nov 06, 2020 at 10:14:30AM +0100, Michał Górny wrote:
2 > On Fri, 2020-11-06 at 08:21 +0100, Agostino Sarubbo wrote:
3 > > Hello all,
4 > >
5 > > 6 months have been passed after the CI system started to file bug reports.
6 > > ~ 4700 bugs have been submitted
7 > >
8 > > We _know_ that atm is not possible to set a specific summary, instead a
9 > > generic summary is used in case of compile failures and test failures.
10 > > There are also some documented limitations.
11 >
12 > I do disagree with your presumption that this needs to be automated.
13 > The whole point behind providing a service is that you should be ready
14 > to dedicate *your* time into the service. However, we keep feeling that
15 > you assume that your time is too precious, and it is better to waste
16 > a little bit of everybody else's time. This is why Toralf's effort is
17 > much more appreciated.
18 >
19
20 ACK. This is the same level of coordination the security team received
21 when a multitude of bugs were filed once ago discovered fuzzing. It was
22 lots of bugs, little information, inabilities to reproduce various
23 crashes, invalid ratings/severity levels, and often a blog that
24 simply regurgitated the same inaccuracies. Any attempt to ask/coordinate
25 was met with lack of information or simply "see my blog" responses.
26
27 The only time interaction occured was when bugs were closed due to
28 invalidity, lack of information, or severity/ratings downgraded.
29
30 All this to say, I concur his actions seem to show that he believes his
31 time is more precious than others and that "numbers matter" when it
32 comes to opening bugs and CVE's.
33
34 > To summarize, what your tinderboxing effort lacks is really a human
35 > touch. You seem to have set the goal to file as many bugs as possible
36 > automatically. I disagree with that, as I would like this effort to
37 > focus on helping developers, not pursuing them. This requires a human
38 > touch, not a machine lord.
39 >
40
41 This right here.
42
43 --
44 Cheers,
45 Aaron

Attachments

File name MIME type
signature.asc application/pgp-signature