自动推荐 security reviewer 的机制

类似 Global，可以通过 @triage-bot 来推荐一个 security reviewer, 一个 MR 有了任何代码改动都需要重新做 security review

Main point

  1. Add two labels in gitlab-cn/gitlab project: ~security-review::pending and ~security-review::approved
  2. Add security info in members data (Current: Fu, Martin, Baodong)
  3. Add security-review CI in gitlab project, always failed when have no label ~security-review::approved
  4. When MR got first approval, a label ~security-review::pending and a comment to notify security members will be automatically added
  5. When MR with label ~security-review::approved has been updated, the label will be changed to ~security-review::pending, and need renotify security members in the same comment

/cc @qianzhangxa @prajnamas

由 Song Huang 编辑于