From f1cd9d1d329dc8b4debb7fd0058b408beda83bdf Mon Sep 17 00:00:00 2001 From: Matthias Bussonnier Date: Wed, 8 Nov 2023 14:59:54 +0100 Subject: [PATCH 1/2] Add security.md --- SECURITY.md | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000..f107c205 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,24 @@ +# Security Policy + +## Supported Versions + +Only the latest non-prerelease version is supported. + +## Security contact information + +To report a security vulnerability + +### Directly on GitHub + +You can also directly propose a GitHub security advisory on the Flit Security page of github: + +[https://github.com/pypa/flit/security](https://github.com/pypa/flit/security]) + +### via Tidelift: + +You can use the +[Tidelift security contact](https://tidelift.com/security). Tidelift will coordinate the +fix and disclosure. + +If you are a tidelift subscriber, this is the preferred path + From a8940ec1a3716f892f2f14375808731139066dcb Mon Sep 17 00:00:00 2001 From: Matthias Bussonnier Date: Fri, 10 Nov 2023 02:14:47 -0800 Subject: [PATCH 2/2] Update SECURITY.md Co-authored-by: Thomas Kluyver --- SECURITY.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SECURITY.md b/SECURITY.md index f107c205..fd360b2e 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -12,7 +12,7 @@ To report a security vulnerability You can also directly propose a GitHub security advisory on the Flit Security page of github: -[https://github.com/pypa/flit/security](https://github.com/pypa/flit/security]) +[https://github.com/pypa/flit/security](https://github.com/pypa/flit/security) ### via Tidelift: