Skip to content

Commit 4bf2cdd

Browse files
committed
Update existing Microsoft policies to MVG
1 parent 56601b9 commit 4bf2cdd

File tree

7 files changed

+34
-48
lines changed

7 files changed

+34
-48
lines changed

.github/CODE_OF_CONDUCT.md

+5-5
Original file line numberDiff line numberDiff line change
@@ -1,9 +1,9 @@
1-
# Microsoft Open Source Code of Conduct
1+
# Contributor Covenant Code of Conduct
22

3-
This project has adopted the [Microsoft Open Source Code of Conduct](https://opensource.microsoft.com/codeofconduct/).
3+
This project has adopted the [Contributor Covenant Code of Conduct](https://www.contributor-covenant.org/).
44

55
Resources:
66

7-
- [Microsoft Open Source Code of Conduct](https://opensource.microsoft.com/codeofconduct/)
8-
- [Microsoft Code of Conduct FAQ](https://opensource.microsoft.com/codeofconduct/faq/)
9-
- Contact [[email protected]](mailto:[email protected]) with questions or concerns
7+
- [Contributor Covenant Code of Conduct](https://www.contributor-covenant.org/version/2/1/code_of_conduct/)
8+
- [Contributor Covenant Code of Conduct FAQ](https://www.contributor-covenant.org/faq/)
9+
- Contact @adamjstewart on Slack with questions or concerns

.github/CONTRIBUTING.md

+14-3
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,21 @@
11
# Contributing
22

3-
This Project welcomes contributions, suggestions, and feedback. All contributions, suggestions, and feedback you submitted are accepted under the [Project's license](./LICENSE.md). You represent that if you do not own copyright in the code that you have the authority to submit it under the [Project's license](./LICENSE.md). All feedback, suggestions, or contributions are not confidential.
3+
This Project welcomes contributions, suggestions, and feedback. All contributions, suggestions, and feedback you submitted are accepted under the [Project's license](../LICENSE). You represent that if you do not own copyright in the code that you have the authority to submit it under the [Project's license](../LICENSE). All feedback, suggestions, or contributions are not confidential.
44

5-
[Should be further filled in by the project - including defining the requirements to reach maintainer status]
5+
TorchGeo is an open-source project built by contributors like you from around the world. If you find a bug or would like to add a new feature, please open a pull request. For further information on how to contribute, including topics like:
66

7-
The Project abides by the Organization's [code of conduct](../org-docs/CODE-OF-CONDUCT.md) and [trademark policy](../org-docs/TRADEMARKS.md).
7+
- using git,
8+
- licensing requirements,
9+
- writing and running unit tests,
10+
- running linters,
11+
- building the documentation, and
12+
- adding new datasets,
13+
14+
please see our [Contributing Guide](https://torchgeo.readthedocs.io/en/stable/user/contributing.html).
15+
16+
You can find a curated list of issues that we believe are easy for new contributors to tackle at https://github.com/microsoft/torchgeo/contribute.
17+
18+
The Project abides by the Organization's [code of conduct](https://github.com/github/MVG/blob/main/org-docs/CODE-OF-CONDUCT.md) and [trademark policy](https://github.com/github/MVG/blob/main/org-docs/TRADEMARKS.md).
819

920
---
1021
Part of MVG-0.1-beta.

.github/GOVERNANCE.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# Governance Policy
22

3-
This document provides the governance policy for the Project. Maintainers agree to this policy and to abide by all Project polices, including the [code of conduct](../org-docs/CODE-OF-CONDUCT.md), [trademark policy](../org-docs/TRADEMARKS.md), and [antitrust policy](../org-docs/ANTITRUST.md) by adding their name to the [maintainers.md file](./MAINTAINERS.md).
3+
This document provides the governance policy for the Project. Maintainers agree to this policy and to abide by all Project polices, including the [code of conduct](https://github.com/adamjstewart/torchgeo-governance/blob/main/CODE-OF-CONDUCT.md), [trademark policy](https://github.com/adamjstewart/torchgeo-governance/blob/main/TRADEMARKS.md), and [antitrust policy](https://github.com/adamjstewart/torchgeo-governance/blob/main/ANTITRUST.md) by adding their name to the [maintainers.md file](./MAINTAINERS.md).
44

55
## 1. Roles.
66

.github/MAINTAINERS.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
# Maintainers
22

3-
This document lists the Maintainers of the Project. Maintainers may be added once approved by the existing maintainers as described in the [Governance document](./GOVERNANCE.md). By adding your name to this list you are agreeing to abide by the Project governance documents and to abide by all of the Organization's polices, including the [code of conduct](../org-docs/CODE-OF-CONDUCT.md), [trademark policy](../org-docs/TRADEMARKS.md), and [antitrust policy](../org-docs/ANTITRUST.md). If you are participating because of your affiliation with another organization (designated below), you represent that you have the authority to bind that organization to these policies.
3+
This document lists the Maintainers of the Project. Maintainers may be added once approved by the existing maintainers as described in the [Governance document](./GOVERNANCE.md). By adding your name to this list you are agreeing to abide by the Project governance documents and to abide by all of the Organization's polices, including the [code of conduct](https://github.com/adamjstewart/torchgeo-governance/blob/main/CODE-OF-CONDUCT.md), [trademark policy](https://github.com/adamjstewart/torchgeo-governance/blob/main/TRADEMARKS.md), and [antitrust policy](https://github.com/adamjstewart/torchgeo-governance/blob/main/ANTITRUST.md). If you are participating because of your affiliation with another organization (designated below), you represent that you have the authority to bind that organization to these policies.
44

55
| **NAME** | **Organization** |
66
| --- | --- |

.github/SECURITY.md

+12-33
Original file line numberDiff line numberDiff line change
@@ -1,41 +1,20 @@
1-
<!-- BEGIN MICROSOFT SECURITY.MD V0.0.5 BLOCK -->
1+
# Security Policy
22

3-
## Security
3+
## Supported Versions
44

5-
Microsoft takes the security of our software products and services seriously, which includes all source code repositories managed through our GitHub organizations, which include [Microsoft](https://github.com/Microsoft), [Azure](https://github.com/Azure), [DotNet](https://github.com/dotnet), [AspNet](https://github.com/aspnet), [Xamarin](https://github.com/xamarin), and [our GitHub organizations](https://opensource.microsoft.com/).
5+
We provide security updates for `main` and for the most recent minor (`X.Y`) release series of TorchGeo. Security updates will be made available as patch (`X.Y.1`, `X.Y.2`, etc.) releases.
66

7-
If you believe you have found a security vulnerability in any Microsoft-owned repository that meets [Microsoft's definition of a security vulnerability](https://docs.microsoft.com/en-us/previous-versions/tn-archive/cc751383%28v=technet.10%29), please report it to us as described below.
7+
For more on Spack's release structure, see our
8+
[Wiki](https://github.com/microsoft/torchgeo/wiki/Releasing-Instructions).
89

9-
## Reporting Security Issues
10+
## Reporting a Vulnerability
1011

11-
**Please do not report security vulnerabilities through public GitHub issues.**
12+
You can report a vulnerability using GitHub's private reporting feature:
1213

13-
Instead, please report them to the Microsoft Security Response Center (MSRC) at [https://msrc.microsoft.com/create-report](https://msrc.microsoft.com/create-report).
14+
1. Go to [https://github.com/microsoft/torchgeo/security](https://github.com/microsoft/torchgeo/security).
15+
2. Click "Report a vulnerability" in the upper right corner of that page.
16+
3. Fill out the form and submit your draft security advisory.
1417

15-
If you prefer to submit without logging in, send email to [[email protected]](mailto:[email protected]). If possible, encrypt your message with our PGP key; please download it from the [Microsoft Security Response Center PGP Key page](https://www.microsoft.com/en-us/msrc/pgp-key-msrc).
18+
More details are available in [GitHub's docs](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability).
1619

17-
You should receive a response within 24 hours. If for some reason you do not, please follow up via email to ensure we received your original message. Additional information can be found at [microsoft.com/msrc](https://www.microsoft.com/msrc).
18-
19-
Please include the requested information listed below (as much as you can provide) to help us better understand the nature and scope of the possible issue:
20-
21-
- Type of issue (e.g. buffer overflow, SQL injection, cross-site scripting, etc.)
22-
- Full paths of source file(s) related to the manifestation of the issue
23-
- The location of the affected source code (tag/branch/commit or direct URL)
24-
- Any special configuration required to reproduce the issue
25-
- Step-by-step instructions to reproduce the issue
26-
- Proof-of-concept or exploit code (if possible)
27-
- Impact of the issue, including how an attacker might exploit the issue
28-
29-
This information will help us triage your report more quickly.
30-
31-
If you are reporting for a bug bounty, more complete reports can contribute to a higher bounty award. Please visit our [Microsoft Bug Bounty Program](https://microsoft.com/msrc/bounty) page for more details about our active programs.
32-
33-
## Preferred Languages
34-
35-
We prefer all communications to be in English.
36-
37-
## Policy
38-
39-
Microsoft follows the principle of [Coordinated Vulnerability Disclosure](https://www.microsoft.com/en-us/msrc/cvd).
40-
41-
<!-- END MICROSOFT SECURITY.MD BLOCK -->
20+
You can expect to hear back about security issues within two days. If your security issue is accepted, we will do our best to release a fix within a week. If fixing the issue will take longer than this, we will discuss timeline options with you.

.github/SUPPORT.md

-4
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,3 @@ issues before filing new issues to avoid duplicates. For new issues, file your b
77
feature request as a new Issue.
88

99
For help and questions about using this project, please open an Issue.
10-
11-
## Microsoft Support Policy
12-
13-
Support for TorchGeo is limited to the resources listed above.

README.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -276,4 +276,4 @@ If you use this software in your work, please cite our [paper](https://dl.acm.or
276276

277277
This project welcomes contributions and suggestions. If you would like to submit a pull request, see our [Contribution Guide](https://torchgeo.readthedocs.io/en/stable/user/contributing.html) for more information.
278278

279-
This project has adopted the [Microsoft Open Source Code of Conduct](https://opensource.microsoft.com/codeofconduct/). For more information see the [Code of Conduct FAQ](https://opensource.microsoft.com/codeofconduct/faq/) or contact [[email protected]](mailto:[email protected]) with any additional questions or comments.
279+
This project has adopted the [Contributor Covenant Code of Conduct](https://www.contributor-covenant.org/). For more information see the [Contributor Covenant Code of Conduct FAQ](https://www.contributor-covenant.org/faq/) or contact @adamjstewart on Slack with any additional questions or comments.

0 commit comments

Comments
 (0)