Principle:Apache Airflow Security Review Planning
| Knowledge Sources | |
|---|---|
| Domains | Release_Engineering, Security |
| Last Updated | 2026-02-08 00:00 GMT |
Overview
A pre-release verification process that validates release schedules against published calendars and triages security vulnerabilities.
Description
Security Review and Release Planning is the first step of the release process. It involves verifying that the planned release aligns with the published release calendar, triaging outstanding security issues (CVEs, dependabot alerts), and ensuring all critical fixes are included. The verify_release_calendar.py script cross-references the Confluence release plan with the Google Calendar feed to identify scheduling conflicts.
Usage
Run before initiating any release to ensure the schedule is correct and all security issues have been addressed. This prevents releasing with known critical vulnerabilities or scheduling conflicts.
Theoretical Basis
Pre-release Checklist:
- Calendar Verification: Compare Confluence wiki release plan with Google Calendar entries
- Security Triage: Review and categorize outstanding security issues
- Dependency Audit: Check dependabot alerts for vulnerable dependencies
- Blocker Assessment: Identify any release-blocking issues