Besides the whole source code compromise discussion I would really want to know whether there is any incident report planned.

Until the redesign kernel.org stated: "We will be writing up a report on the incident in the future.".

But since the compromise was more than 2 years ago it seems unlikely.