Gradle build logs

classic Classic list List threaded Threaded
7 messages Options
Reply | Threaded
Open this post in threaded view
|

Gradle build logs

Russel Winder-3
Cédric,

<semi-humour-mode>
I wonder if the Infrastructure section of the Gradle build log every Groovy
build submits to Gradle constitutes personal information under the GDPR?
</semi-humour-mode>

--
Russel.
===========================================
Dr Russel Winder      t: +44 20 7585 2200
41 Buckmaster Road    m: +44 7770 465 077
London SW11 1EN, UK   w: www.russel.org.uk

signature.asc (849 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: Gradle build logs

Cédric Champeau
I think you're right: currently the build uses `publishAlways()` and has license accept enabled, but it should be per person.

Le jeu. 7 juin 2018 à 12:09, Russel Winder <[hidden email]> a écrit :
Cédric,

<semi-humour-mode>
I wonder if the Infrastructure section of the Gradle build log every Groovy
build submits to Gradle constitutes personal information under the GDPR?
</semi-humour-mode>

--
Russel.
===========================================
Dr Russel Winder      t: +44 20 7585 2200
41 Buckmaster Road    m: +44 7770 465 077
London SW11 1EN, UK   w: www.russel.org.uk
Reply | Threaded
Open this post in threaded view
|

Re: Gradle build logs

Russel Winder-3
On Thu, 2018-06-07 at 12:12 +0200, Cédric Champeau wrote:
> I think you're right: currently the build uses `publishAlways()` and has
> license accept enabled, but it should be per person.

Cédric,

Thanks for picking up I was being serious but trying to avoid seeming like
"gammon".


I suggest the road to de-personalisation would be not to collect user name,
machine names, and machine IP addresses. In terms of logs, I can't see that
they add anything. Clearly the rest of the data could be useful, and so is
worth collecting. It is also nothing personal just data about a Groovy build
on a particular machine, with machine details actually being important.


--
Russel.
===========================================
Dr Russel Winder      t: +44 20 7585 2200
41 Buckmaster Road    m: +44 7770 465 077
London SW11 1EN, UK   w: www.russel.org.uk

signature.asc (849 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: Gradle build logs

Cédric Champeau
Well, currently there's no way to tell that you don't want to expose _some_ of the data, so you need to opt-in (which is, AFAIK, GDPR compliant, see https://gradle.com/legal/privacy). The problem is that the Groovy build assumes the license has been accepted by everybody, which is not the case, so we should at least ask once.

Le jeu. 7 juin 2018 à 12:26, Russel Winder <[hidden email]> a écrit :
On Thu, 2018-06-07 at 12:12 +0200, Cédric Champeau wrote:
> I think you're right: currently the build uses `publishAlways()` and has
> license accept enabled, but it should be per person.

Cédric,

Thanks for picking up I was being serious but trying to avoid seeming like
"gammon".


I suggest the road to de-personalisation would be not to collect user name,
machine names, and machine IP addresses. In terms of logs, I can't see that
they add anything. Clearly the rest of the data could be useful, and so is
worth collecting. It is also nothing personal just data about a Groovy build
on a particular machine, with machine details actually being important.


--
Russel.
===========================================
Dr Russel Winder      t: +44 20 7585 2200
41 Buckmaster Road    m: +44 7770 465 077
London SW11 1EN, UK   w: www.russel.org.uk
Reply | Threaded
Open this post in threaded view
|

Re: Gradle build logs

Cédric Champeau
I have added an explicit opt-in :)

Le jeu. 7 juin 2018 à 12:39, Cédric Champeau <[hidden email]> a écrit :
Well, currently there's no way to tell that you don't want to expose _some_ of the data, so you need to opt-in (which is, AFAIK, GDPR compliant, see https://gradle.com/legal/privacy). The problem is that the Groovy build assumes the license has been accepted by everybody, which is not the case, so we should at least ask once.

Le jeu. 7 juin 2018 à 12:26, Russel Winder <[hidden email]> a écrit :
On Thu, 2018-06-07 at 12:12 +0200, Cédric Champeau wrote:
> I think you're right: currently the build uses `publishAlways()` and has
> license accept enabled, but it should be per person.

Cédric,

Thanks for picking up I was being serious but trying to avoid seeming like
"gammon".


I suggest the road to de-personalisation would be not to collect user name,
machine names, and machine IP addresses. In terms of logs, I can't see that
they add anything. Clearly the rest of the data could be useful, and so is
worth collecting. It is also nothing personal just data about a Groovy build
on a particular machine, with machine details actually being important.


--
Russel.
===========================================
Dr Russel Winder      t: +44 20 7585 2200
41 Buckmaster Road    m: +44 7770 465 077
London SW11 1EN, UK   w: www.russel.org.uk
Reply | Threaded
Open this post in threaded view
|

Re: Gradle build logs

Russel Winder-3
On Thu, 2018-06-07 at 13:20 +0200, Cédric Champeau wrote:
> I have added an explicit opt-in :)
>

I believe this is a good choice.

Will it be persistent for the user on a given machine or will the question be
asked every time there is a build?

I am guessing CI is exempt from this.

--
Russel.
===========================================
Dr Russel Winder      t: +44 20 7585 2200
41 Buckmaster Road    m: +44 7770 465 077
London SW11 1EN, UK   w: www.russel.org.uk

signature.asc (849 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: Gradle build logs

Cédric Champeau
The message explains how you can make the choice persistent, and yes, CI is exempt.

Le ven. 8 juin 2018 à 14:43, Russel Winder <[hidden email]> a écrit :
On Thu, 2018-06-07 at 13:20 +0200, Cédric Champeau wrote:
> I have added an explicit opt-in :)
>

I believe this is a good choice.

Will it be persistent for the user on a given machine or will the question be
asked every time there is a build?

I am guessing CI is exempt from this.

--
Russel.
===========================================
Dr Russel Winder      t: +44 20 7585 2200
41 Buckmaster Road    m: +44 7770 465 077
London SW11 1EN, UK   w: www.russel.org.uk