Please add simple filtering rules to block opening issues/PRs based on description

[mattklein123]

We have a continuous problem in https://github.com/envoyproxy/envoy where people ignore all of the warnings about opening issues/PRs that could be potential security issues / zero-days.

• We guide people when opening an issue: https://github.com/envoyproxy/envoy/blob/main/.github/ISSUE_TEMPLATE/config.yml
• Each of the other templates has big warning text on top like this: https://github.com/envoyproxy/envoy/blob/071455b3c7640cf3941640299fd807907bf2d592/.github/ISSUE_TEMPLATE/non--crash-security--bug.md?plain=1#L10-L12

Still, people open issues.

What we want is some very trivial way to apply regex rules to the text in issues and PRs that can block them with a message before they are opened. This way, we could filter for things like "crash", "segfault,", things that look like hex addresses, etc. Obviously this is imperfect but it would cover 99% of cases.

Maintainers/admins would need a way to override this so issues could be opened after they are cleared, but it could be as simple as not applying the rules for maintainers/admins.

Thank you for your consideration.

[mattklein123]

Thinking about it more, the other way of approaching this would be to have an option for all issues/PRs to go into a moderation queue. This would be a lot more work to implement I would guess and a lot more work for maintainers. But throwing it out there.

[KateCatlin]

Thank you for this suggestion, Matt! I'm a PM from GitHub and am very interested in this idea. Reaching out by email to set up some time to chat.