Skip to content

Add SECURITY.md#20

Merged
abhishek-anand merged 1 commit into
mainfrom
add-security-md
Apr 14, 2026
Merged

Add SECURITY.md#20
abhishek-anand merged 1 commit into
mainfrom
add-security-md

Conversation

@mkagenius
Copy link
Copy Markdown
Collaborator

Adds a security policy with guidelines for responsibly reporting vulnerabilities.

  • Report via email: hello@instavm.io
  • Or use GitHub's private security advisory reporting
  • Do not open public issues for security vulnerabilities

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copy link
Copy Markdown

@gemini-code-assist gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request introduces a SECURITY.md file to establish a security policy and provide clear instructions for reporting vulnerabilities via email or GitHub Security Advisories. The review feedback suggests enhancing the policy by adding a 'Supported Versions' section to specify which project versions are actively maintained with security updates.

Comment thread SECURITY.md
@@ -0,0 +1,12 @@
# Security Policy

## Reporting a Vulnerability
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

security-medium medium

It is a best practice to include a 'Supported Versions' section in your security policy. This helps researchers and users understand which versions of the project are currently receiving security updates. Additionally, consider linking this policy from the 'Security' section in your README.md.

Suggested change
## Reporting a Vulnerability
## Supported Versions
Please use the table below to check if the version of CodeRunner you are using is currently supported with security updates.
| Version | Supported |
| ------- | ------------------ |
| Latest | :white_check_mark: |
| < 1.0 | :x: |
## Reporting a Vulnerability

@abhishek-anand abhishek-anand merged commit 45bc117 into main Apr 14, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants