← Back to issue list

docs: add a security policy

View original Github issue

Metadata

Project
imagecraft
Number
#116
Type
pull request
State
merged
Author
upils
Labels
—
Created
Updated
Closed

Current evaluation

Merged PR #116 in commit 3413219, adding a Rockcraft-derived security policy; release-cycle guidance remains deferred until Imagecraft's first stable release.

Resolution: closed resolved

Reason: PR #116 was approved and merged as commit 3413219, introducing the requested security policy.

Evaluated by: mr-cal-bot

No scores available.

Issue body

- [ ] Have you followed the guidelines for contributing? - [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)? - [ ] Have you successfully run `make lint && make test`? --- This is slightly adapted from Rockcraft's security policy. The section about release cycle was omitted on purpose and should be added once a first stable version of Imagecraft is released. CRAFT-4277

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged PR #116 in commit 3413219, adding a Rockcraft-derived security policy; release-cycle guidance remains deferred until Imagecraft's first stable release.
stealth/space-bunny-alpha — closed resolved Merged in canonical/imagecraft#116 (3413219), adding a Rockcraft-derived security policy; release-cycle guidance was deferred until Imagecraft's first stable release.
stealth/space-bunny-alpha — closed resolved Merged PR #116 in commit 3413219, adding an Imagecraft security policy adapted from Rockcraft; release-cycle guidance was deferred until a stable release.
qwen/qwen3.6-35b-a3b — — Merged documentation adding a security policy adapted from Rockcraft. The release cycle section was omitted pending the first stable release. Approved by two reviewers and passed CI checks.
qwen3.6-35b-a3b-mtp-q6 — — Merged documentation adding a security policy adapted from Rockcraft. The release cycle section was deferred until a stable release. Resolves CRAFT-4277.

Update history

No update history recorded yet.

Related issues

Issue Project State Summary Similarity
#837 docs: add security policy rockcraft merged Merged PR #837 (commit 0f44e504) added a real SECURITY.md for rockcraft, replacing the GitHub template (#356/#365) with a policy covering rock authorship, build isolation, supported bases and vulnerability reporting via private security reports.
88%
#154 docs: add security policy craft-archives merged PR #154 by bepri added a 34-line SECURITY.md (release cycle scope plus private security report/embargo guidance) for CRAFT-4299; approved by two reviewers and merged as commit 015bbe5.
81%
#730 docs: add security policy craft-providers merged Merged PR #730 (commit dc8ff23) added SECURITY.md to craft-providers, documenting supported release cycle and how to file a private security report; resolves CRAFT-4780.
79%
#1037 docs: add security policy craft-parts merged Merged #1037, adding a 34-line security policy for CRAFT-4279 in commit 8ee49ba8.
79%
#329 docs: add security policy craft-cli merged Merged: PR #329 by bepri added SECURITY.md to craft-cli documenting supported release cycle and Canonical private vulnerability reporting; landed as commit 561c533 (CRAFT-4301), approved with 2 reviewers.
78%
#110 docs: add security policy craft-platforms merged Merged #110 in commit 64b8ae2, adding SECURITY.md with supported-version guidance and private vulnerability-reporting instructions (CRAFT-4281).
78%
#274 docs: add security policy craft-store merged Merged canonical/craft-store#274 (commit fff8fa5, CRAFT-4302), adding a 34-line SECURITY.md stating supported versions and pointing reporters to private GitHub security advisories.
76%
#671 docs: add security policy craft-application merged PR #671 merged (commit 251a48a3), adding SECURITY.md to craft-application ported from Starbase's policy. Documents supported versions and directs reports to GitHub private advisories; advisories tab still pending with Canonical security team.
75%
#5324 docs: add security policy snapcraft merged Merged PR #5324 in commit 7a164a2bc, adding SECURITY.md with vulnerability reporting, supported-release, and base/Ubuntu LTS guidance.
74%
#63 Add initial SECURITY.md policy imagecraft merged Merged PR #63 (commit 2148066) by upils added Imagecraft's first SECURITY.md: responsibility split between image authors and LXD/Multipass for build isolation, latest-release-only support, and GitHub private security reports.
73%