Skip to content

docs: take security reports through GitHub private vulnerability reporting - #604

Merged
don-petry merged 1 commit into
mainfrom
chore/security-contact
Oct 14, 2026
Merged

don-petry merged 1 commit into
mainfrom
chore/security-contact

Conversation

@don-petry

@don-petry don-petry commented Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

The security@petry-projects.dev address never received mail (the domain has no DNS). Private vulnerability reporting is now enabled on this repo, so reports arrive as private draft advisories and no email address is published.

1 file changed, 1 insertion(+), 1 deletion(-)

🤖 Generated with Claude Code

View guided diff Turn on auto-fix

Problem

See the linked issue.

Risk

Low — documentation/configuration only; no runtime code paths change.

Test plan

No test files were added or updated. Verification: bash scripts/dev-lead-lint.sh (shellcheck --severity=warning) ran pre-commit; the existing CI (bats + lint) guards the change.

Rollback

Revert this PR. No non-revertible side effects (no tags, migrations, or external state).

Monitoring

n/a — no runtime effect; documentation/configuration only.

…rting

The security@petry-projects.dev address never received mail (the domain has no DNS). Private vulnerability reporting is now enabled on this repo, so reports arrive as private draft advisories and no email address is published.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@don-petry
don-petry requested a review from a team as a code owner October 14, 2026 21:56
@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, you can upgrade your account or add credits to your account and enable them for code reviews in your settings.

@coderabbitai

coderabbitai Bot commented Oct 14, 2026

Copy link
Copy Markdown

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 25 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 2808d6ab-5dd4-4158-8947-c8cd885a5758
📥 Commits

Reviewing files that changed from the base of the PR and between 662822a and dbca20d.

📒 Files selected for processing: 1
  • SECURITY.md

Warning

.coderabbit.yaml has a parsing error

The CodeRabbit configuration file in this repository has a parsing error and default settings were used instead. Please fix the error(s) in the configuration file. You can initialize chat with CodeRabbit to get help with the configuration file.

Parsing errors: 1
Validation error: Invalid input: expected string, received object at "reviews.path_filters[3]"
⚙️ Configuration instructions
  • Please see the configuration documentation for more information.
  • You can also validate your configuration using the online YAML validator.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@sonarqubecloud

Copy link
Copy Markdown

@don-petry

Copy link
Copy Markdown
Contributor Author

Dev-Lead — waiting on PR blockers (intent: review-changes)

PR: #604
No changes were committed, but the PR still can't be marked done: required checks Go, SonarCloud, TypeScript, dependency-audit / Detect ecosystems are still pending. The retry cron will re-attempt automatically. Next attempt after: 2026-10-14T22:29:30Z

@don-petry

Copy link
Copy Markdown
Contributor Author

Note

@don-petry I reviewed this PR and no code changes were needed, but I can't mark it done yet: required checks Go, SonarCloud, TypeScript, dependency-audit / Detect ecosystems are still pending. I'll re-check automatically.
Next attempt after: 2026-10-14T22:29:30Z

@don-petry
don-petry enabled auto-merge (squash) October 14, 2026 21:59
@don-petry
don-petry merged commit 307f1ef into main Oct 14, 2026
30 of 31 checks passed
@don-petry
don-petry deleted the chore/security-contact branch October 14, 2026 22:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant