Skip to content

Remove GitHub security advisory commitment - #6144

Merged
jmecom merged 1 commit into
mainfrom
jm/remove-security-advisory-commitment
Aug 17, 2026
Merged

Remove GitHub security advisory commitment#6144
jmecom merged 1 commit into
mainfrom
jm/remove-security-advisory-commitment

Conversation

@jmecom

@jmecom jmecom commented Aug 17, 2026

Copy link
Copy Markdown
Collaborator

Removes the promise in SECURITY.md to publish a GitHub Security Advisory after every security fix is released.

The disclosure policy continues to state that Buzz follows coordinated disclosure and credits reporters unless they request anonymity.

Checked with git diff --check.

Signed-off-by: Jordan Mecom <jm@squareup.com>
@jmecom
jmecom marked this pull request as ready for review August 17, 2026 18:03
@jmecom
jmecom requested a review from a team as a code owner August 17, 2026 18:03
@jmecom
jmecom merged commit 85bacea into main Aug 17, 2026
24 checks passed
@jmecom
jmecom deleted the jm/remove-security-advisory-commitment branch August 17, 2026 18:48
morgmart added a commit that referenced this pull request Aug 17, 2026
…graphy-staging

* origin/main:
  Remove GitHub security advisory commitment (#6144)
  Rename Bumble agent to Pollen (#5864)
  fix(desktop): resolve agent profiles through one archive-aware selector (#5706)
  fix(acp): gate relay-signed workflow messages on their attributed author (#6129)
  fix(acp): replace Goose native system prompt (#5964)
  feat(workflows): add responsive library card actions (#6008)
  fix(desktop): enforce shared agent access across devices (#6086)
  feat(model-capabilities): drive model capabilities and labels from one manifest (#5597)

Signed-off-by: morgmart <98432065+morgmart@users.noreply.github.com>
wpfleger96 pushed a commit that referenced this pull request Aug 17, 2026
…gaps

* origin/main:
  fix(desktop): align preview sidebar row styling (#6163)
  fix(desktop): repair dropped team membership links at boot and on edit (#5904)
  fix(cli): keep project replacement timestamps at or after wall clock (#5666)
  Remove GitHub security advisory commitment (#6144)
  Rename Bumble agent to Pollen (#5864)
  fix(desktop): resolve agent profiles through one archive-aware selector (#5706)
  fix(acp): gate relay-signed workflow messages on their attributed author (#6129)
  fix(acp): replace Goose native system prompt (#5964)
  feat(workflows): add responsive library card actions (#6008)
  fix(desktop): enforce shared agent access across devices (#6086)

Signed-off-by: Duncan <dcfd242e557282d7a1e2cf2e6877522682f1e5c6156dc92ca7d90eaedd3b0f95@buzz.block.builderlab.xyz>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants