KhronosGroup / Vulkan-Headers

Vulkan header files and API registry
https://www.vulkan.org/
Other
841 stars 218 forks source link

Create a Security Policy #430

Closed joycebrum closed 1 year ago

joycebrum commented 1 year ago

[Not a bug] Hi, I'd like to suggest a security policy to Vulkan-Headers similar to the ones suggested to glslang, opengl-registry and spirv-headers.

A Security Policy is a GitHub standard document that provides instructions on how to report vulnerabilities in a safe and efficient way. It can be found in the "Security Tab" or in the main page of a repository.

image

The Security Policy is a Scorecard Recommendation and a GitHub Recommendation, meaning that it is considered a best practice for improving the security of a project.

I will be submitting a suggestion of Security Policy, the same used for other KhronosGroup repos. Please feel free to edit it directly or ask me for revisions until it is in compliance with how Vulkan-Headers would best handle vulnerability reports.

juan-lunarg commented 1 year ago

Sorry I was on vacation. I'll start taking a look.

juan-lunarg commented 1 year ago

Thanks @joycebrum I've added the security policy. I would have merged your PR but it appears to have been opened in your fork. Not on this repo.

Regardless it looks good now.

joycebrum commented 1 year ago

Ah my bad, I didn't noticed it. But thanks for migrating it to the right repo!