Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create Security Policy #6354

Merged
merged 6 commits into from
Apr 3, 2024
Merged

Create Security Policy #6354

merged 6 commits into from
Apr 3, 2024

Conversation

joycebrum
Copy link
Contributor

Closes #6353

I've created the following SECURITY.md file (preview) considering the report vulnerability through security advisory, which is a new GitHub feature.

If you're interested in GitHub's feature, it must be activated for the repository:

  1. Open the repo's settings
  2. Click on Code security & analysis
  3. Click "Enable" for "Private vulnerability reporting (Beta)"

If you rather not enable it, there is also the possibility to receive the vulnerability report through an email. In this case just let me know what would be the email and I'll submit the change.

Besides that, feel free to edit or suggest any changes to this document.
Thanks!

Signed-off-by: Joyce <joycebrum@google.com>
SECURITY.md Outdated

## Reporting a Vulnerability

Beware that none of the topics under [Using LLaMA C++ Securely](#using-LLaMA-C++-securely) are considered vulnerabilities of LLaMA C++.
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The link should probably be to #using-llama-c-securely instead, as it is it doesn't work in the preview.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah, just tested it and #using-llama-c-securely works. Fixed, thanks.

SECURITY.md Outdated
@@ -0,0 +1,67 @@
# Security Policy

- [**Using LLaMA C++ Securely**](#using-LLaMA-C++-securely)
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same here.

joycebrum and others added 4 commits April 3, 2024 14:36
Signed-off-by: Joyce <joycebrum@google.com>
Signed-off-by: Joyce <joycebrum@google.com>
@ggerganov ggerganov merged commit e69945d into ggerganov:master Apr 3, 2024
21 checks passed
tybalex pushed a commit to rubra-ai/tools.cpp that referenced this pull request Apr 17, 2024
* Create SECURITY.md

Signed-off-by: Joyce <joycebrum@google.com>

* Fix: link on SECURITY.md

Signed-off-by: Joyce <joycebrum@google.com>

* Fix: link on SECURITY.md

Signed-off-by: Joyce <joycebrum@google.com>

* minor

* fix

* fix

---------

Signed-off-by: Joyce <joycebrum@google.com>
Co-authored-by: Georgi Gerganov <ggerganov@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Create a Security Policy with safe consuming instructions
3 participants