Skip to content

Add SECURITY.md#32

Merged
Chris-Wolfgang merged 1 commit into
mainfrom
update/add-security-md
Apr 2, 2026
Merged

Add SECURITY.md#32
Chris-Wolfgang merged 1 commit into
mainfrom
update/add-security-md

Conversation

@Chris-Wolfgang

Copy link
Copy Markdown
Owner

Summary

  • Add SECURITY.md for responsible vulnerability disclosure via GitHub Security tab

Test plan

  • Verify SECURITY.md renders correctly on GitHub

🤖 Generated with Claude Code

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Copilot AI review requested due to automatic review settings April 2, 2026 18:04
@Chris-Wolfgang Chris-Wolfgang force-pushed the update/add-security-md branch from 53add84 to 93d801c Compare April 2, 2026 18:04

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds a repository-level security policy to guide responsible vulnerability disclosure via GitHub’s built-in Security/Advisories workflow.

Changes:

  • Introduces SECURITY.md with reporting instructions through the GitHub Security tab
  • Documents an expected response/acknowledgement timeline (48 hours)

@Chris-Wolfgang Chris-Wolfgang merged commit 50a456d into main Apr 2, 2026
12 checks passed
@Chris-Wolfgang Chris-Wolfgang deleted the update/add-security-md branch April 2, 2026 18:37
Chris-Wolfgang added a commit that referenced this pull request May 14, 2026
Backport of repo-template PR #339. The 'Fetch trusted configuration files
from main branch' step writes .editorconfig / Directory.Build.props /
BannedSymbols.txt back via 'Out-File -Encoding UTF8' which writes UTF-8
*with* BOM. The .NET analyzer engine appears to ignore .editorconfig
files prefixed by a BOM, so project-level severity overrides don't apply
on CI even though they apply locally — analyzers fire at default severity
and TreatWarningsAsErrors then escalates them to errors.

Switch to 'Out-File -Encoding UTF8NoBOM' (PS 6+; the runner uses pwsh).

Diagnosed against Chris-Wolfgang/In-memory-Logger PR #32 / run
24996715587. See Chris-Wolfgang/repo-template#339 for the full write-up.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants