Skip to content

Commit f84b98f

Browse files
Copilothyp3ri0n-ng
andcommitted
Add comprehensive security scanning documentation
- Add SECURITY_SETUP.md with detailed security scanning setup guide - Include instructions for Dependabot, CodeQL, Safety, Bandit, pip-audit - Add Amazon Q Developer integration guidelines - Add security best practices and incident response procedures - Update SECURITY.md with vulnerability reporting policy - Add supported versions table to SECURITY.md - Reference SECURITY_SETUP.md for security scanning setup Co-authored-by: hyp3ri0n-ng <3106718+hyp3ri0n-ng@users.noreply.github.com>
1 parent f568b06 commit f84b98f

File tree

2 files changed

+398
-0
lines changed

2 files changed

+398
-0
lines changed

SECURITY.md

Lines changed: 31 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,34 @@
1+
# Security Policy
2+
3+
## Reporting Security Vulnerabilities
4+
5+
If you discover a security vulnerability in PyCDP, please report it by:
6+
7+
1. **Do NOT** open a public issue
8+
2. Email the maintainers directly (see repository for contact information)
9+
3. Include detailed information about the vulnerability:
10+
- Description of the issue
11+
- Steps to reproduce
12+
- Potential impact
13+
- Suggested fix (if available)
14+
15+
We will respond to security reports within 48 hours and work with you to address the issue promptly.
16+
17+
## Security Scanning Setup
18+
19+
For information on setting up automated security scanning for this project, see [SECURITY_SETUP.md](SECURITY_SETUP.md).
20+
21+
## Supported Versions
22+
23+
We provide security updates for the following versions:
24+
25+
| Version | Supported |
26+
| ------- | ------------------ |
27+
| 0.5.x | :white_check_mark: |
28+
| < 0.5 | :x: |
29+
30+
---
31+
132
# Security-Relevant API Updates
233

334
This document highlights the security-relevant additions to the Chrome DevTools Protocol implementation in this update.

0 commit comments

Comments
 (0)