Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

Commitb20de09

Browse files
committed
Affirm that gitdb and smmap advisories can also be created
This expands `SECURITY.md` to affirm the claims in the new`SECURITY.md` files in gitdb and smmap that vulnerabilities foundin them can be reported in the GitPython repository with the samelink as one would use to report a GitPython vulnerability, as wellas to note how the distinction between affected package can bespecified when it is known at the time a vulnerability is reported.Along withgitpython-developers/smmap#59andgitpython-developers/gitdb#117, thisfixesgitpython-developers/gitdb#116.
1 parenta7c7433 commitb20de09

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

‎SECURITY.md‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,4 +11,6 @@ Only the latest version of GitPython can receive security updates. If a vulnerab
1111

1212
##Reporting a Vulnerability
1313

14-
Please report private portions of a vulnerability to<https://github.com/gitpython-developers/GitPython/security/advisories/new>. Doing so helps to receive updates and collaborate on the matter, without disclosing it publicliy right away.
14+
Please report private portions of a vulnerability to<https://github.com/gitpython-developers/GitPython/security/advisories/new>. Doing so helps to receive updates and collaborate on the matter, without disclosing it publicly right away.
15+
16+
Vulnerabilities in GitPython's dependencies[gitdb](https://github.com/gitpython-developers/gitdb/blob/main/SECURITY.md) or[smmap](https://github.com/gitpython-developers/smmap/blob/main/SECURITY.md), which primarily exist to support GitPython, can be reported here as well, at that same link. The affected package (`GitPython`,`gitdb`, or`smmap`) can be included in the report, if known.

0 commit comments

Comments
 (0)
[8]ページ先頭
©2009-2025 Movatter.jp