Skip to main content

Tuleap Community Edition development and releases are no longer public. You have until September 30th to download packages and sources in Tuleap project. You can contact the team if you need further assistance.

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #14950 Add a security policy (aka SECURITY.md) at the root of the sources
    Infos
    #14950
    Thomas Gerbet (tgerbet)
    2020-06-05 15:21
    2020-06-04 16:54
    16210
    Details
    Add a security policy (aka SECURITY.md) at the root of the sources
    The security policy for the Tuleap project is currently defined on the tuleap.org website (https://www.tuleap.org/security/) which is essential but:
    * the sources of Tuleap are replicated in multiple locations, finding how to report a security issue should be easy whatever the location
    * having this document in the Tuleap repository means it can be easily used as a base for other Tuleap sub-projects/tools.
    * since the migration of tuleap.org to a CMS the content of the security policy is no more versioned (at least not in a way that is usable) which makes hard to track and follow changes over time
    * my confidence in the management of the CMS is not very high and ultimately this document should be peer-reviewed
    Other
    Empty
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Thomas Gerbet (tgerbet)
    Closed
    2020-06-05
    Attachments
    Empty
    References
    Referenced by request #14950

    Artifact

    rel #14816 11.16

    Other

    gerrit #19132
    Display settings

    Follow-ups