Skip to content

docs: take security reports through GitHub private vulnerability reporting - #532

Merged
don-petry merged 2 commits into
mainfrom
chore/security-contact
Oct 14, 2026
Merged

don-petry merged 2 commits into
mainfrom
chore/security-contact

Conversation

@don-petry

@don-petry don-petry commented Oct 14, 2026 •

Copy link
Copy Markdown
Contributor

The security@petry-projects.dev address never received mail (the domain has no DNS). Private vulnerability reporting is now enabled on this repo, so reports arrive as private draft advisories and no email address is published.

1 file changed, 1 insertion(+), 1 deletion(-)

🤖 Generated with Claude Code

View guided diff Turn on auto-fix

Problem

See the linked issue.

Risk

Low — documentation/configuration only; no runtime code paths change.

Test plan

No test files were added or updated. Verification: bash scripts/dev-lead-lint.sh (shellcheck --severity=warning) ran pre-commit; the existing CI (bats + lint) guards the change.

Rollback

Revert this PR. No non-revertible side effects (no tags, migrations, or external state).

Monitoring

n/a — no runtime effect; documentation/configuration only.

…rting

The security@petry-projects.dev address never received mail (the domain has no DNS). Private vulnerability reporting is now enabled on this repo, so reports arrive as private draft advisories and no email address is published.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@don-petry
don-petry requested a review from a team as a code owner October 14, 2026 21:56
@chatgpt-codex-connector

Copy link
Copy Markdown

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.
To continue using code reviews, you can upgrade your account or add credits to your account and enable them for code reviews in your settings.

@coderabbitai

coderabbitai Bot commented Oct 14, 2026 •

Copy link
Copy Markdown

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 47 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

⚙️ Run configuration
  • Configuration used: Repository: combsmith/markets/.coderabbit.yaml
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 5647ddea-4c1a-4d0c-a10b-f224f7f29feb
📥 Commits

Reviewing files that changed from the base of the PR and between 03c3529 and 3abb769.

📒 Files selected for processing: 1
  • SECURITY.md
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@don-petry

Copy link
Copy Markdown
Contributor Author

Dev-Lead — waiting on PR blockers (intent: review-changes)

PR: #532
No changes were committed, but the PR still can't be marked done: required check dependency-audit / Detect ecosystems is still pending. The retry cron will re-attempt automatically. Next attempt after: 2026-10-14T22:29:44Z

@don-petry

Copy link
Copy Markdown
Contributor Author

Note

@don-petry I reviewed this PR and no code changes were needed, but I can't mark it done yet: required check dependency-audit / Detect ecosystems is still pending. I'll re-check automatically.
Next attempt after: 2026-10-14T22:29:44Z

@don-petry
don-petry enabled auto-merge (squash) October 14, 2026 21:59
@sonarqubecloud

Copy link
Copy Markdown

@don-petry
don-petry merged commit 040d65b into main Oct 14, 2026
27 of 28 checks passed
@don-petry
don-petry deleted the chore/security-contact branch October 14, 2026 22:14
@donpetry-bot

Copy link
Copy Markdown
Contributor

Advisory bots were rate-limited; auto-approval is withheld until they recover. pr-review-sweep will re-review this PR after 2026-10-14T23:18:06Z.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants