← Back to issue list

Add a SECURITY.md file

View original Github issue

Metadata

Project
starbase
Number
#277
Type
issue
State
closed
Author
bepri
Labels
—
Created
Updated
Closed

Current evaluation

Closed as a duplicate of canonical/starbase#82, which was resolved by merged PR #356 (commit 4adfa53, "docs: add SECURITY.md template") adding a Security Engineering-vetted SECURITY.md.

Resolution: closed superseded

Reason: Maintainer lengau closed the issue on 2024-11-18 citing "Duplicate of https://github.com/canonical/starbase/issues/82". That tracking issue was fixed by PR #356, commit 4adfa53, which added the SECURITY.md now present in the repo (later touched by commit 3fe6515 in PR #365).

Evaluated by: mr-cal-bot

No scores available.

Issue body

Our repositories should feature a SECURITY.md file to help point reporters in the right direction for reporting sensitive vulnerabilities.

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed superseded Closed as a duplicate of canonical/starbase#82, which was resolved by merged PR #356 (commit 4adfa53, "docs: add SECURITY.md template") adding a Security Engineering-vetted SECURITY.md.
stealth/space-bunny-alpha — closed superseded Closed as a duplicate of canonical/starbase#82. That request was fixed by merged PR #356 (commit 4adfa53), adding a vetted SECURITY.md template.
qwen/qwen3.6-35b-a3b — — Closed as a duplicate of canonical/starbase/issues/82. The request to add a SECURITY.md file was superseded by the referenced issue, which tracks the same requirement for vulnerability reporting.
qwen/qwen3.6-35b-a3b — — Closed as a duplicate of canonical/starbase#82. The request to add a SECURITY.md file for vulnerability reporting was superseded by the referenced issue.
qwen3.6-35b-a3b-mtp-q6 — — Closed as a duplicate of canonical/starbase/issues/82. The request to add a SECURITY.md file for vulnerability reporting was superseded by the referenced issue.

Update history

No update history recorded yet.

Related work

  • Duplicate Of: canonical/starbase#82 (confidence 99%)

    Explicitly named by maintainer lengau in the closing comment; that issue tracks the SECURITY.md work.

  • Likely Fixed By: canonical/starbase#356 (confidence 95%)

    Merged PR titled 'docs: add SECURITY.md template' (commit 4adfa53) delivering the requested file.

Related issues

Issue Project State Summary Similarity
#356 docs: add SECURITY.md template starbase merged Merged PR #356 (commit 4adfa53) added a Security Engineering-reviewed SECURITY.md template to starbase, documenting vulnerability reporting for CRAFT-3700; tracked issue #82 was closed by it.
85%
#671 docs: add security policy craft-application merged PR #671 merged (commit 251a48a3), adding SECURITY.md to craft-application ported from Starbase's policy. Documents supported versions and directs reports to GitHub private advisories; advisories tab still pending with Canonical security team.
72%
#1125 Add SECURITY.md to templates charmcraft open Request to add SECURITY.md to charmcraft init templates; root repo has one via starbase but generated charm projects still lack it; maintainer reconsidering scope, Jira CRAFT-3709 open.
72%
#372 docs: add security policy fetch-service merged Merged PR #372 (commit 38d65fb, "docs: add security policy") adding a 32-line SECURITY.md to fetch-service, documenting what counts as a vulnerability, supported versions, and private reporting via GitHub security advisories.
71%
#82 Security policy starbase closed Request for a repo security policy was fulfilled by merged PR #356 (commit 4adfa53), which added a Security Engineering-vetted SECURITY.md to starbase with Ubuntu LTS release-cycle and private vulnerability reporting guidance.
71%