docs: add security policy
Metadata
Current evaluation
Merged PR #372 (commit 38d65fb, "docs: add security policy") adding a 32-line SECURITY.md to fetch-service, documenting what counts as a vulnerability, supported versions, and private reporting via GitHub security advisories.
Resolution: closed resolved
Reason: The PR itself was merged into main as commit 38d65fb after approval from 2 reviewers, adding SECURITY.md with the vulnerability-reporting process; no code changes involved.
Evaluated by: mr-cal-bot
No scores available.
Issue body
- [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
-----
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #372 (commit 38d65fb, "docs: add security policy") adding a 32-line SECURITY.md to fetch-service, documenting what counts as a vulnerability, supported versions, and private reporting via GitHub security advisories. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #372, adding a 32-line SECURITY.md to document the project’s vulnerability-reporting process. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged after two reviewer approvals, adding a security policy document. The change introduces 32 lines to a single file to establish project security reporting guidelines. |
Update history
| Date | Change |
|---|---|
| created |
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #80 docs: add security policy | craft-grammar | merged | Merged PR #80 in commit 869adcc, adding a 34-line SECURITY.md covering supported versions and private vulnerability reporting. | |
| #5324 docs: add security policy | snapcraft | merged | Merged PR #5324 in commit 7a164a2bc, adding SECURITY.md with vulnerability reporting, supported-release, and base/Ubuntu LTS guidance. | |
| #110 docs: add security policy | craft-platforms | merged | Merged #110 in commit 64b8ae2, adding SECURITY.md with supported-version guidance and private vulnerability-reporting instructions (CRAFT-4281). | |
| #671 docs: add security policy | craft-application | merged | PR #671 merged (commit 251a48a3), adding SECURITY.md to craft-application ported from Starbase's policy. Documents supported versions and directs reports to GitHub private advisories; advisories tab still pending with Canonical security team. | |
| #730 docs: add security policy | craft-providers | merged | Merged PR #730 (commit dc8ff23) added SECURITY.md to craft-providers, documenting supported release cycle and how to file a private security report; resolves CRAFT-4780. | |
| #154 docs: add security policy | craft-archives | merged | PR #154 by bepri added a 34-line SECURITY.md (release cycle scope plus private security report/embargo guidance) for CRAFT-4299; approved by two reviewers and merged as commit 015bbe5. | |
| #329 docs: add security policy | craft-cli | merged | Merged: PR #329 by bepri added SECURITY.md to craft-cli documenting supported release cycle and Canonical private vulnerability reporting; landed as commit 561c533 (CRAFT-4301), approved with 2 reviewers. | |
| #274 docs: add security policy | craft-store | merged | Merged canonical/craft-store#274 (commit fff8fa5, CRAFT-4302), adding a 34-line SECURITY.md stating supported versions and pointing reporters to private GitHub security advisories. | |
| #837 docs: add security policy | rockcraft | merged | Merged PR #837 (commit 0f44e504) added a real SECURITY.md for rockcraft, replacing the GitHub template (#356/#365) with a policy covering rock authorship, build isolation, supported bases and vulnerability reporting via private security reports. | |
| #1037 docs: add security policy | craft-parts | merged | Merged #1037, adding a 34-line security policy for CRAFT-4279 in commit 8ee49ba8. |