diff --git a/general/security/security-engineer.md b/general/security/security-engineer.md index 9afb32fcb0e8fd0138225dafac2345bd42e324a0..0a6f4e1a85bc5e61ed01fbe8440cf15ba5245039 100644 --- a/general/security/security-engineer.md +++ b/general/security/security-engineer.md @@ -68,7 +68,7 @@ Quality Engineer notifies Security Engineer that the testing environments are re * The `pre.gitlab.com` environment. * Locally via the docker images of the built packages at https://dev.gitlab.org/gitlab/omnibus-gitlab/container_registry * i.e. `docker pull dev.gitlab.org:5005/gitlab/omnibus-gitlab/gitlab-ee:X.X.X-ee.0` - +* If a fix has known weaknesses (a cleaner long term solution is planned but cannot be implemented right now), try to find a flaw that would allow an attacker to bypass the current patch * Verify fixes on all backports on environments provided by Quality. * Once validated, assign the issue back to the release manager(s) and notify them that the fixes are ready to be published.