First pass at defining our threat model and security policy

AcademySoftwareFoundation / rez

An integrated package configuration, build and deployment system for software

https://rez.readthedocs.io

Apache License 2.0

938 stars 332 forks source link

Open JeanChristopheMorinPerso opened 7 months ago

JeanChristopheMorinPerso commented 7 months ago

Fixes #1650

Very WIP. Created a draft PR for visibility.

Should we add the assumption that external plugins can be loaded and override builtin plugins?
Need to define the kind of threats that we are vulnerable to.
Fix typos, etc.