Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Create SECURITY.md #143

Merged
merged 2 commits into from
May 13, 2024
Merged

Create SECURITY.md #143

merged 2 commits into from
May 13, 2024

Commits on May 13, 2024

  1. Create SECURITY.md 

    This PR creates a security policy based off of recommendations from the OpenSSF Scorecard. 

A security policy may seem gratuitous, but its worthwhile to remember that this library was born from a security vulnerability on the repo from which it was forked, satori/go.uuid.  Our library is simple, but it doesn't mean its immune from vulnerabilities or security issues :)

With this security policy, we shoot for simplicity:

- Support latest, unless there's a very good reason to not. Our package is relatively easy to keep up to date, and we go through great pains to not break the API. As a result, we should be able to put forth an expectation of supporting latest.
- Lay out simple instructions for reporting a vulnerability
- Mention our cooperation with OpenSSF Scorecard, and make a nod to the fact that our actively maintained score may drop when there's just not much to do with the library.
    @cameracker
    cameracker committed May 13, 2024
    Configuration menu
    Copy the full SHA
    7e2b96f View commit details
    Browse the repository at this point in the history

  2. Apply suggestions from code review

    @cameracker
    cameracker authored May 13, 2024
    Configuration menu
    Copy the full SHA
    deb3336 View commit details
    Browse the repository at this point in the history