The vulnerability management team will discuss changes to the tooling and the workflow, to put in place during the Juno cycle.
That includes: - Icehouse retrospective - improvements in the vulnerability management process - definition of the security-supported set of projects and branches - using a private Gerrit to review security patches and OSSA drafts - publish OSSAs in a read-only reference location - security patches test infrastructure