← Back to issue list

docs: add security policy

View original Github issue

Metadata

Project
snapcraft
Number
#5324
Type
pull request
State
merged
Author
mr-cal
Labels
—
Created
Updated
Closed

Current evaluation

Merged PR #5324 in commit 7a164a2bc, adding SECURITY.md with vulnerability reporting, supported-release, and base/Ubuntu LTS guidance.

Resolution: closed resolved

Reason: PR #5324 was merged into main as commit 7a164a2bc. It introduced the security policy and documented how supported bases align with Ubuntu LTS releases.

Evaluated by: mr-cal-bot

No scores available.

Issue body

- [x] Have you followed the [guidelines for contributing](https://github.com/canonical/snapcraft/blob/main/CONTRIBUTING.md)? - [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)? - [x] Have you successfully run `make lint`? - [x] Have you successfully run `make test`? --- Adds a security policy using language from https://docs.google.com/document/d/1lFrbvsGc273dRGOyfGKjqlT2fIfMZiotu3JJanQ75V4/edit?tab=t.0.

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed resolved Merged PR #5324 in commit 7a164a2bc, adding SECURITY.md with vulnerability reporting, supported-release, and base/Ubuntu LTS guidance.
stealth/space-bunny-alpha — closed resolved Merged PR #5324 in commit 7a164a2bc, adding Snapcraft’s security policy and clarifying how bases relate to Ubuntu releases.
qwen/qwen3.6-35b-a3b — — Merged documentation adding a security policy. Approved by two reviewers, the change adds 33 lines across two files and clarifies the relationship between bases and Ubuntu releases.
qwen3.6-35b-a3b-mtp-q6 — — Merged a pull request adding a security policy document. The author updated the policy with two paragraphs clarifying the relationship between bases and Ubuntu releases.

Update history

No update history recorded yet.

Related issues

Issue Project State Summary Similarity
#80 docs: add security policy craft-grammar merged Merged PR #80 in commit 869adcc, adding a 34-line SECURITY.md covering supported versions and private vulnerability reporting.
90%
#372 docs: add security policy fetch-service merged Merged PR #372 (commit 38d65fb, "docs: add security policy") adding a 32-line SECURITY.md to fetch-service, documenting what counts as a vulnerability, supported versions, and private reporting via GitHub security advisories.
88%
#671 docs: add security policy craft-application merged PR #671 merged (commit 251a48a3), adding SECURITY.md to craft-application ported from Starbase's policy. Documents supported versions and directs reports to GitHub private advisories; advisories tab still pending with Canonical security team.
84%
#110 docs: add security policy craft-platforms merged Merged #110 in commit 64b8ae2, adding SECURITY.md with supported-version guidance and private vulnerability-reporting instructions (CRAFT-4281).
84%
#329 docs: add security policy craft-cli merged Merged: PR #329 by bepri added SECURITY.md to craft-cli documenting supported release cycle and Canonical private vulnerability reporting; landed as commit 561c533 (CRAFT-4301), approved with 2 reviewers.
83%
#2237 docs: add security policy charmcraft merged PR #2237 merged as commit e699fd97, adding SECURITY.md covering charm vs Charmcraft responsibility, LXD/Multipass build isolation, destructive builds, base/Ubuntu LTS support cycle, and private vulnerability reporting.
82%
#154 docs: add security policy craft-archives merged PR #154 by bepri added a 34-line SECURITY.md (release cycle scope plus private security report/embargo guidance) for CRAFT-4299; approved by two reviewers and merged as commit 015bbe5.
81%
#730 docs: add security policy craft-providers merged Merged PR #730 (commit dc8ff23) added SECURITY.md to craft-providers, documenting supported release cycle and how to file a private security report; resolves CRAFT-4780.
80%
#837 docs: add security policy rockcraft merged Merged PR #837 (commit 0f44e504) added a real SECURITY.md for rockcraft, replacing the GitHub template (#356/#365) with a policy covering rock authorship, build isolation, supported bases and vulnerability reporting via private security reports.
79%
#274 docs: add security policy craft-store merged Merged canonical/craft-store#274 (commit fff8fa5, CRAFT-4302), adding a 34-line SECURITY.md stating supported versions and pointing reporters to private GitHub security advisories.
79%