Nix Team Meetings, Security Reports, and Project Board Triage Process

[All meeting notes](https://discourse.nixos.org/search?expanded=true&q=Nix%20team%20meeting%20minutes%20%23%20%23dev%3Anix%20in%3Atitle%20order%3Alatest_topic) are published on Discourse under the [Nix category](https://discourse.nixos.org/c/dev/nix/50). Team meetings are generally open to anyone interested. We can make exceptions to discuss sensitive issues, such as security incidents or people matters. Contact any team member to get a calendar invite for reminders and updates. > [!IMPORTANT] > [Handling security reports](./security-reports.md) always takes priority. ## Project board protocol The team uses a [GitHub project board](https://github.com/orgs/NixOS/projects/19/views/1) for tracking its work. Items on the board progress through the following states: ### No Status During the discussion meeting, the team triages new items. To be considered, issues and pull requests must have a high-level description to provide the whole team with the necessary context at a glance. On every meeting, at least one item from each of the following categories is inspected: 1. [critical](https://github.com/NixOS/nix/labels/critical) 2. [security](https://github.com/NixOS/nix/labels/security) 3. [regression](https://github.com/NixOS/nix/labels/regression) 4. [bug](https://github.com/NixOS/nix/issues?q=is%3Aopen+label%3Abug+sort%3Areactions-%2B1-desc) 5. [tests of existing functionality](https://github.com/NixOS/nix/issues?q=is%3Aopen+label%3Atests+-label%3Afeature+sort%3Areactions-%2B1-desc) - [oldest pull requests](https://github.com/NixOS/nix/pulls?q=is%3Apr+is%3Aopen+sort%3Acreated-asc) - [most popular pull requests](https://github.com/NixOS/nix/pulls?q=is%3Apr+is%3Aopen+sort%3Areactions-%2B1-desc) - [oldest issues](https://github.com/NixOS/nix/issues?q=is%3Aissue+is%3Aopen+sort%3Acreated-asc) - [most popular issues](https://github.com/NixOS/nix/issues?q=is%3Aissue+is%3Aopen+sort%3Areactions-%2B1-desc) Team members can also add pull requests or issues they would like the whole team to consider. To ensure process quality and reliability, all non-trivial pull requests must be triaged before merging. If there is disagreement on the general idea behind an issue or pull request, it is moved to [To discuss](#to-discuss). Otherwise, the issue or pull request in questions get the label [`idea approved`](https://github.com/NixOS/nix/labels/idea%20approved). For issues this means that an implementation is welcome and will be prioritised for review. For pull requests this means that: - Unfinished work is encouraged to be continued. - A reviewer is assigned to take responsibility for getting the pull request merged. The item is moved to the [Assigned](#assigned) column.

This section details the Nix team's meeting accessibility, emphasis on prioritizing security reports, and the triage process using a GitHub project board. During meetings, the team reviews new issues and pull requests, focusing on critical, security, regression, bug-related, and testing items, as well as considering oldest/most popular pull requests and issues. The triage process includes approving ideas and assigning reviewers for pull requests, moving items to the 'Assigned' column for further action, or to 'To discuss' if there's disagreement.