← Back to issue list

Add initial SECURITY.md policy

View original Github issue

Metadata

Project
imagecraft
Number
#63
Type
pull request
State
merged
Author
upils
Labels
—
Created
Updated
Closed

Current evaluation

Merged PR #63 (commit 2148066) by upils added Imagecraft's first SECURITY.md: responsibility split between image authors and LXD/Multipass for build isolation, latest-release-only support, and GitHub private security reports.

Resolution: closed resolved

Reason: The PR itself was merged into main as commit 8e45156 (head 2148066) after approval, adding the 16-line SECURITY.md that now exists in the repo. A later PR #116 (commit 3413219) refined the same policy.

Evaluated by: mr-cal-bot

No scores available.

Issue body

No description provided.

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged PR #63 (commit 2148066) by upils added Imagecraft's first SECURITY.md: responsibility split between image authors and LXD/Multipass for build isolation, latest-release-only support, and GitHub private security reports.
stealth/space-bunny-alpha — closed resolved Merged initial SECURITY.md policy in canonical/imagecraft#63; commit 2148066 added the 16-line policy and was merged as 8e45156.
qwen/qwen3.6-35b-a3b — — Merged the addition of an initial SECURITY.md policy. Approved by one reviewer with zero unresolved comments, the change added 16 lines to a single file and passed Codecov coverage checks, successfully integrating the security policy.
qwen3.6-35b-a3b-mtp-q6 — — Merged an initial SECURITY.md policy authored by maintainer upils. Codecov verified full test coverage on the changes. The repository now enforces a formal security reporting and handling policy.

Update history

No update history recorded yet.

Related work

  • Related To: canonical/imagecraft#116 (confidence 88%)

    Follow-up merged PR (commit 3413219) that reworked the same SECURITY.md, adding a Rockcraft-derived policy and release-cycle guidance.

Related issues

Issue Project State Summary Similarity
#2237 docs: add security policy charmcraft merged PR #2237 merged as commit e699fd97, adding SECURITY.md covering charm vs Charmcraft responsibility, LXD/Multipass build isolation, destructive builds, base/Ubuntu LTS support cycle, and private vulnerability reporting.
76%
#154 docs: add security policy craft-archives merged PR #154 by bepri added a 34-line SECURITY.md (release cycle scope plus private security report/embargo guidance) for CRAFT-4299; approved by two reviewers and merged as commit 015bbe5.
74%
#80 docs: add security policy craft-grammar merged Merged PR #80 in commit 869adcc, adding a 34-line SECURITY.md covering supported versions and private vulnerability reporting.
74%
#5324 docs: add security policy snapcraft merged Merged PR #5324 in commit 7a164a2bc, adding SECURITY.md with vulnerability reporting, supported-release, and base/Ubuntu LTS guidance.
74%
#110 docs: add security policy craft-platforms merged Merged #110 in commit 64b8ae2, adding SECURITY.md with supported-version guidance and private vulnerability-reporting instructions (CRAFT-4281).
74%
#837 docs: add security policy rockcraft merged Merged PR #837 (commit 0f44e504) added a real SECURITY.md for rockcraft, replacing the GitHub template (#356/#365) with a policy covering rock authorship, build isolation, supported bases and vulnerability reporting via private security reports.
73%
#730 docs: add security policy craft-providers merged Merged PR #730 (commit dc8ff23) added SECURITY.md to craft-providers, documenting supported release cycle and how to file a private security report; resolves CRAFT-4780.
73%
#116 docs: add a security policy imagecraft merged Merged PR #116 in commit 3413219, adding a Rockcraft-derived security policy; release-cycle guidance remains deferred until Imagecraft's first stable release.
73%
#329 docs: add security policy craft-cli merged Merged: PR #329 by bepri added SECURITY.md to craft-cli documenting supported release cycle and Canonical private vulnerability reporting; landed as commit 561c533 (CRAFT-4301), approved with 2 reviewers.
73%
#372 docs: add security policy fetch-service merged Merged PR #372 (commit 38d65fb, "docs: add security policy") adding a 32-line SECURITY.md to fetch-service, documenting what counts as a vulnerability, supported versions, and private reporting via GitHub security advisories.
73%