Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add instructions on how to report security issues #126

Merged
merged 2 commits into from
Oct 3, 2024

Conversation

seb128
Copy link
Contributor

@seb128 seb128 commented Oct 3, 2024

Quoting SEC0026 - SSDLC

SECURITY.md (V1.1)
Any public repository must also include a SECURITY.md file in the root directory, which educates users/contributors on
how to report a security concern.

The content of the file is based on the template referenced in the spec and what other Canonical repository are already using

Note that CONTRIBUTING as a similar section under 'Getting Started' which I didn't edit, we could keep it/delete it or point to the new file, any preference?

@seb128 seb128 requested a review from sminez October 3, 2024 12:32
Copy link

github-actions bot commented Oct 3, 2024

Everyone contributing to this PR have now signed the CLA. Thanks!

@seb128 seb128 force-pushed the security-reporting-instructions branch from 0202c33 to bf766f8 Compare October 3, 2024 12:34
@seb128
Copy link
Contributor Author

seb128 commented Oct 3, 2024

I've amended the commit to use my canonical email to please the CLA and forced pushed

SECURITY.md Outdated Show resolved Hide resolved
Co-authored-by: Lukas Klingsbo <[email protected]>
@sminez sminez merged commit f1d0a49 into canonical:main Oct 3, 2024
9 checks passed
sminez added a commit that referenced this pull request Oct 3, 2024
…#128)

I was over eager on merging
#126 which had an
outstanding question about the details on reporting security issues. We
now point to the new SECURITY.md file rather than provided details in
CONTRIBUTING.md
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants