Nice catch "For bullseye, the security suite is now named bullseye-security..." 
We still have one desktop (puppet managed) which is a debian stretch. I don't know
whether that's a blocking point or not, just mentioning it as it will fail 
I've recently added it to the vagrant list of nodes but I don't recall whether that's
provisioning completely or not (i added it because i needed it to check something)
$ ssh giverny.internal.softwareheritage.org lsb_release -c Codename: stretch
 octo is not happy.
Error: Failed to compile catalog for node giverny.softwareheritage.org: Evaluation Error: Error while evaluating a Function Call, Unsupported debian version stretch (file: /tmp/ocd-ipc-20210909-14940-1g0za7a/ocd-builddir-20210909-14945-1p91xwk/environments/production/site-modules/profile/manifests/swh/apt_config.pp, line: 53, column: 9) on node giverny.softwareheritage.org *** End octocatalog-diff on giverny.softwareheritage.org