Update SECURITY.md - Bring it up to par with the one in server
#241
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Signed-off-by: Josh Richards <josh.t.richards@gmail.com>
|
yeah, the sentence or meaning of it should be kept. Too many repos in the nextcloud org are not "maintained" by us and we don't have the resources, but the files from this repo will be used for new repos and when it's missing I think |
Signed-off-by: Josh Richards <josh.t.richards@gmail.com>
|
Alright I attempted to add some updated language for that too. Let me know! |
Signed-off-by: Joas Schilling <coding@schilljs.com>
nickvergessen
approved these changes
Oct 26, 2023
joshtrichards
added a commit
to nextcloud/server
that referenced
this pull request
Oct 26, 2023
Just making it match the new global one in nextcloud/.github#241 Signed-off-by: Josh Richards <josh.t.richards@gmail.com>
4 tasks
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Offshoot of nextcloud/server#40966.
One caveat: I think the line added in 6c45691 in the existing Security Policy was probably trying to accommodate maybe either some of the "hosted" but still fairly independent sub-projects and/or maybe a way to accommodate reports about third-party maintained apps.
a) Is my guess accurate?
b) Should we try to accommodate that still?
c) If so, maybe we can find a clearer way to state that?
If a/b/c === true then we can add it to this PR before it gets merged if deemed appropriate.