Comment 2 for bug 1267635

I think some of this would be relevant for OSSA if we consider(ed) heat-templates in the scope of what we release advisories for.

At this point the scope/coverage for the has be loosely defined. Everyone agrees that Integrated projects count. We have a few extra projects covered too (python-*client corresponding to integrated projects in particular). We need to have that discussion about scope ASAP to clarify our position. Until we get more resources on the VMT my position is rather minimalist.

So my lazy answer would be to leave them out of scope until the most obvious issues are fixed, at which point we could consider adding them...