Skip to content

Commit

Permalink
Add dynamic security workflow and update SECURITY.md
Browse files Browse the repository at this point in the history
At thoughtbot, we'd like to have a unified approach to security issues
within our projects. This dynamic workflow will update Clearance's
SECURITY.md with any changes made to SECURITY.md in the
thoughtbot/templates repo.
  • Loading branch information
sej3506 committed Jul 19, 2024
1 parent c5c3032 commit 5a5a625
Show file tree
Hide file tree
Showing 2 changed files with 21 additions and 16 deletions.
19 changes: 19 additions & 0 deletions .github/workflows/dynamic-security.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
name: update-security

on:
push:
branches:
- main
paths:
- SECURITY.md
workflow_dispatch:

jobs:
update-security:
permissions:
contents: write
pull-requests: write
pages: write
uses: thoughtbot/templates/.github/workflows/dynamic-security.yaml@main
secrets:
token: ${{ secrets.GITHUB_TOKEN }}
18 changes: 2 additions & 16 deletions SECURITY.md
Original file line number Diff line number Diff line change
@@ -1,16 +1,2 @@
# Security Policy

## Supported Versions

We will provide security updates for the latest 3 versions.

| Version | Security updates |
| - | - |
| 2.7.x ||
| 2.6.x ||
| 2.5.x ||
| < 2.5.0 | :x: |

## Reporting a Vulnerability

You can contact <[email protected]>. See <https://thoughtbot.com/security> for more information about our security policy.
<!-- START /templates/security.md -->
<!-- END /templates/security.md -->

0 comments on commit 5a5a625

Please sign in to comment.