Enhance SECURITY.md with more information and suggestions - #74
Enhance SECURITY.md with more information and suggestions#74wycliffekimondo024-sketch wants to merge 1 commit into
Conversation
Added sections for additional information and skill suggestions.
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: b6e224fc25
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| | 5.1.x | :white_check_mark: | | ||
| | 5.0.x | :x: | | ||
| | 4.0.x | :white_check_mark: | | ||
| | < 4.0 | :x: | |
There was a problem hiding this comment.
This support matrix appears to be the default GitHub template rather than this repo's actual release policy: the README/CHANGELOG only document the v1 and v2 skill lines, and there are no 4.x/5.x tags in the repository. Publishing these rows marks non-existent 5.1.x and 4.0.x releases as supported while omitting the real installable versions, which can mislead users about which versions will receive security fixes.
Useful? React with 👍 / 👎.
| Use this section to tell people how to report a vulnerability. | ||
|
|
||
| Tell them where to go, how often they can expect to get an update on a | ||
| reported vulnerability, what to expect if the vulnerability is accepted or | ||
| declined, etc. |
There was a problem hiding this comment.
When GitHub surfaces this SECURITY.md to someone reporting a vulnerability, this section gives only template text and no actual private contact or process, so reporters have no actionable security channel or response expectations. Please replace the placeholder with the real reporting destination and handling policy instead of leaving generic instructions.
Useful? React with 👍 / 👎.
|
It's advisable to include a security policy to prevent misuse of content |
1 participant
Added sections for additional information and skill suggestions.