Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(otterdog): adding / updating file(s) due to blueprint default-security-policy #10

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

eclipse-otterdog[bot]
Copy link

This PR has been created automatically by Otterdog due to the following blueprint: Ensures a default SECURITY.md file exists.

This will add a default security policy to the .github repository of the project. The created PR can be edited as needed to adjust to the project's needs.
If a repository defines a more specific SECURITY.md file it will take precedence over the one present in the .github repo.

Copy link
Member

@danielpeintner danielpeintner left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I guess we need a general agreement whether we want to align.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The proposed file differs quite a bit from what we have elsewhere (see https://github.com/eclipse-thingweb/node-wot/blob/master/SECURITY.md?plain=1).
I mean more the syntax, not the actual content. Should we adapt all our files accordingly, or what should we do?


Please include as much of the information listed below as you can to help us better understand and resolve the issue:

* The type of issue (e.g., buffer overflow, SQL injection, or cross-site scripting)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Note: SQL and cross-site scripting does not really apply to us...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant