Skip to content

Commit 2322eab

Browse files
[MERGE]
* feature-add-docs: [STYLE] Style fixes (- WIP PR #76 -) [REGRESSION] Revert flake8.ini filename (- WIP PR #76 -) [CONFIG] minor fix for flake8 config [PATCH] Minor updates from review (- WIP PR #76 -) Update conf.py imports Update toc.md headers Update README.md headers [DOCUMENTATION] debugged sphinx build feature [DOCUMENTATION] tweaks to sphinx build html by default [CONFIG] tweaks to sphinx config [FEATURE] Prototype for docs via sphinx * dependabot/github_actions/dot-github/workflows/master/codecov/codecov-action-5: [UPDATE] (deps): Bump codecov/codecov-action in /.github/workflows
2 parents 14cd475 + 307ac35 commit 2322eab

File tree

2 files changed

+44
-3
lines changed

2 files changed

+44
-3
lines changed

.github/SECURITY.md

Lines changed: 41 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,41 @@
1+
# Security Policy (Template)
2+
3+
## Supported Versions
4+
5+
We actively support the following versions of the project:
6+
7+
| Version | Supported |
8+
| ------- | ------------------ |
9+
| 1.x | :white_check_mark: |
10+
11+
## Reporting a Vulnerability
12+
13+
If you discover a security vulnerability, we encourage you to report it as soon as possible. Please email us at [[email protected]](mailto:[email protected]) with a detailed description of the issue and any relevant proof of concept. We are committed to addressing all security concerns promptly.
14+
15+
## Security Measures
16+
17+
- **Dependency Management**: Our project uses `requirements.txt` and `setup.py` for dependency management. We regularly review and update dependencies to patch known vulnerabilities, adhering to best practices in dependency hygiene.
18+
19+
- **Handling of Secrets**: The codebase does not contain hardcoded secrets such as passwords, API keys, or tokens. We recommend that all contributors use environment variables or secure configuration management tools to handle sensitive information.
20+
21+
- **Secure Coding Practices**: We follow custom coding standards, including **CEP-8** for Python and **CEP-5** for Bash scripts, to ensure code quality and security. These standards emphasize input validation, error handling, and adherence to the principle of least privilege.
22+
23+
- **Encryption and Cryptography**: While the current codebase does not implement encryption or decryption functionalities, any future cryptographic implementations will utilize well-vetted libraries and follow industry-standard algorithms to ensure data integrity and confidentiality.
24+
25+
- **Authentication and Authorization**: References to authentication mechanisms are minimal. Any future integration of authentication features will be designed with robust security protocols and regular audits.
26+
27+
## Code Scanning and Continuous Integration
28+
29+
We employ tools such as `flake8`, `pytest`, and `tox` for continuous integration and static code analysis. These tools help us identify potential security issues early in the development process.
30+
31+
## Security Updates
32+
33+
We are committed to promptly updating the project to address any security vulnerabilities. Users are encouraged to keep their versions up to date to benefit from the latest security enhancements.
34+
35+
## Third-Party Dependencies
36+
37+
All third-party libraries and dependencies are sourced from trusted repositories. We closely monitor these dependencies for any reported vulnerabilities and apply patches as necessary.
38+
39+
## Contact Information
40+
41+
For any security-related inquiries or to report a vulnerability, please contact us at [[email protected]](mailto:[email protected]).

.github/workflows/Tests.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -221,7 +221,7 @@ jobs:
221221
if: ${{ runner.python-version }} != "3.9"
222222
run: make -f Makefile test-pytest ;
223223
- name: Upload Python ${{ matrix.python-version }} coverage to Codecov
224-
uses: codecov/codecov-action@v4
224+
uses: codecov/codecov-action@v5
225225
with:
226226
token: ${{ secrets.CODECOV_TOKEN }}
227227
files: ./coverage.xml
@@ -300,7 +300,7 @@ jobs:
300300
if: ${{ runner.python-version }} != "3.9"
301301
run: make -f Makefile test-pytest ;
302302
- name: Upload Python ${{ matrix.python-version }} coverage to Codecov
303-
uses: codecov/codecov-action@v4
303+
uses: codecov/codecov-action@v5
304304
with:
305305
token: ${{ secrets.CODECOV_TOKEN }}
306306
files: ./coverage.xml
@@ -414,7 +414,7 @@ jobs:
414414
cp -vf ./coverage.xml ./test-reports/coverage.xml || true ;
415415
shell: bash
416416
- name: Upload Python ${{ matrix.python-version }} coverage to Codecov
417-
uses: codecov/codecov-action@v4
417+
uses: codecov/codecov-action@v5
418418
with:
419419
token: ${{ secrets.CODECOV_TOKEN }}
420420
files: ./test-reports/coverage_supplement.xml

0 commit comments

Comments
 (0)