On Mon, May 9, 2022, at 08:00, JT wrote:
Since Fedora mostly consumes upstream projects most of the active security work will be upstream in the respective projects, but there's still work to be done at the Fedora level. Of which I see four primary areas: A) Monitoring things that are reported to the team. B) Reporting and working upstream on any reports/issues that come in C) Managing Community questions about security issues D) Shepherding of long term project with security impacts
I'm glad to help with all of these, especially C. There's also a good opportunity for us to be proactive around security with blog posts (Fedora Magazine, maybe?) and/or updates to Fedora documentation.