From c1c30c5161a5c41ff5ddadf6c59509bb40b55403 Mon Sep 17 00:00:00 2001 From: Trevor Kinsie Date: Mon, 17 Jul 2023 09:05:40 -0400 Subject: [PATCH] Create SECURITY.md for Security Reporting (#186) * Create SECURITY.md * bump version --- CHANGELOG.md | 4 ++++ Gemfile.lock | 2 +- SECURITY.md | 15 +++++++++++++++ lib/ws/style/version.rb | 2 +- 4 files changed, 21 insertions(+), 2 deletions(-) create mode 100644 SECURITY.md diff --git a/CHANGELOG.md b/CHANGELOG.md index bc7b5c4..69fb52c 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,10 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0. ## [Unreleased] +## 7.1.3 - 2023-07-14 +### Changed +- Added SECURITY.md file + ## 7.1.2 - 2023-07-13 ### Changed - Fix missing cop error with standard 1.3.0 diff --git a/Gemfile.lock b/Gemfile.lock index a827166..1123bed 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -1,7 +1,7 @@ PATH remote: . specs: - ws-style (7.1.2) + ws-style (7.1.3) rubocop-rspec (>= 2.2.0) rubocop-vendor (>= 0.11) standard (>= 1.30.1) diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..dffa45c --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,15 @@ +# Security Policy + +Wealthsimple secures our code base using a combination of code review, dependency review, and periodic security reviews. Static analysis is performed during automated verification additionally safeguards against common coding errors which may result in vulnerabilities. + +### Reporting a Vulnerability + +For general defects about this project, please file a [Bug Report](https://github.com/wealthsimple/ws-style/issues/new/choose) + +To report a vulnerability about this project please [Report a security vulnerability](https://github.com/wealthsimple/ws-style/security/advisories/new) + +If you have a vulnerability to report about the Wealthsimple platform, please use our white hat bug bounty program at [Hackerone](https://hackerone.com/wealthsimple) + +### General Support + +For additional support, please open a [Github Discussion](https://github.com/wealthsimple/ws-style/discussions). diff --git a/lib/ws/style/version.rb b/lib/ws/style/version.rb index 3bb4f86..f49c5a4 100644 --- a/lib/ws/style/version.rb +++ b/lib/ws/style/version.rb @@ -1,5 +1,5 @@ module Ws module Style - VERSION = '7.1.2'.freeze + VERSION = '7.1.3'.freeze end end