Hi there,
I’m reviving this proposal since we never reach an agreement, and we’re having question about the two types (see: Even remote code executions of type "Bug" instead of type "Security" on jira.xwiki.org)
I was about to suggest to just get rid of the security type since we just don’t use it anymore since 2 years now. But first I want a confirmation: @vmassol do you recall the technical limitation that forced you to create that? It was to ensure to have tickets created automatically with the confidential level properly set, right?
I’m asking because we might have again in the future the same need: i.e. we might ask again for a security bug bounty program, in which case we’d need to set it up once more. So I’m hesitating, again. wdyt?