leerho opened a new pull request, #545: URL: https://github.com/apache/datasketches-cpp/pull/545
Adds a top-level `SECURITY.md` so GitHub shows a security policy for the repository. It covers: - how to report a vulnerability privately ([email protected] or [email protected]), not through public issues or PRs - the supported-versions policy: only the latest release receives fixes; there are no backports - a pointer to the published vulnerabilities on the website (https://datasketches.apache.org/docs/Community/Security.html, added in apache/datasketches-website#271) - the security model: deserialization must be safe on arbitrary input and must reject malformed input with an exception; other APIs assume callers follow documented preconditions; adversarial bias of estimates is inherent to sketching and not a vulnerability `SECURITY.md` is added to `.rat-excludes` alongside README, CONTRIBUTING and CODE_OF_CONDUCT. `tools/rat-check.sh` passes. 🤖 Generated with [Claude Code](https://claude.com/claude-code) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
