From c57a22ec0dc33e2495cfa83be6f31230a5468531 Mon Sep 17 00:00:00 2001 From: Joyce Date: Tue, 16 May 2023 14:11:59 -0300 Subject: [PATCH 1/3] Create SECURITY.md --- SECURITY.md | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000000..3d74611f2d --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,13 @@ +# Security Policy + +## Supported Versions + +Security updates are applied only to the latest release. + +## Reporting a Vulnerability + +If you have discovered a security vulnerability in this project, please report it privately. **Do not disclose it as a public issue.** This gives us time to work with you to fix the issue before public exposure, reducing the chance that the exploit will be used before a patch is released. + +Please disclose it at [security advisory](https://github.com/pybind/pybind11/security/advisories/new). + +This project is maintained by a team of volunteers on a reasonable-effort basis. As such, please give us at least 90 days to work on a fix before public exposure. From 6eb5fd68a7bb8bb8c596a126fda2d48ab21cf246 Mon Sep 17 00:00:00 2001 From: Joyce Date: Tue, 16 May 2023 15:16:32 -0300 Subject: [PATCH 2/3] Update test_files.py to include SECURITY.md file --- tests/extra_python_package/test_files.py | 1 + 1 file changed, 1 insertion(+) diff --git a/tests/extra_python_package/test_files.py b/tests/extra_python_package/test_files.py index e5982f962e..5b9e145694 100644 --- a/tests/extra_python_package/test_files.py +++ b/tests/extra_python_package/test_files.py @@ -111,6 +111,7 @@ "MANIFEST.in", "README.rst", "PKG-INFO", + "SECURITY.md", } local_sdist_files = { From aa15607e143c2d3505e6b7c10324da5e9448c267 Mon Sep 17 00:00:00 2001 From: Joyce Date: Tue, 16 May 2023 15:26:43 -0300 Subject: [PATCH 3/3] Update MANIFEST.in to include SECURITY.md file --- MANIFEST.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/MANIFEST.in b/MANIFEST.in index 31632acc33..7ce83c5527 100644 --- a/MANIFEST.in +++ b/MANIFEST.in @@ -3,4 +3,4 @@ recursive-include pybind11/include/pybind11 *.h recursive-include pybind11 *.py recursive-include pybind11 py.typed include pybind11/share/cmake/pybind11/*.cmake -include LICENSE README.rst pyproject.toml setup.py setup.cfg +include LICENSE README.rst SECURITY.md pyproject.toml setup.py setup.cfg