search

KhronosGroup / SPIRV-Reflect

SPIRV-Reflect is a lightweight library that provides a C/C++ reflection API for SPIR-V shader bytecode in Vulkan applications.
Apache License 2.0
672 stars 147 forks source link

Create a Security Policy #226

Closed cassiebeckley closed 11 months ago

cassiebeckley commented 11 months ago

This is based on https://github.com/KhronosGroup/SPIRV-Tools/pull/5325. We will need to follow the steps listed to enable the vulnerability reporting feature. (I'll do it if I have the right permissions)

Fixes #225

cassiebeckley commented 11 months ago

I've enabled Private Vulnerability Reporting, reports can be viewed and managed by anyone with admin permissions here: https://github.com/KhronosGroup/SPIRV-Reflect/security/advisories.