Compare commits

...

17 Commits

Author SHA1 Message Date
Zack Koppert 95e9dcb0b8
Merge pull request #116 from ghost/master 2 years ago
Zack Koppert fdd808d654
Merge pull request #122 from nihaals/fix-trailing-slash 2 years ago
Zack Koppert 6691a0f704
Merge pull request #196 from cicdguy/patch-1
Add period to list item
2 years ago
Dinakar 0a9881173c
Add period to list item 2 years ago
Ashley Wolf 0a9f7832a3
Merge pull request #180 from xn4p4lm/patch-1
Updating the link for the Safe Harbor Policy
2 years ago
Ashley Wolf 45190ead2a
Merge pull request #181 from zkoppert/patch-2
Allow CODEOWNERS file detection to see into the .github directory
2 years ago
Zack Koppert 3ba05a7a8e
* was not matching directories beginning with . 2 years ago
Diana Moore 1a2a884ebf
Updating the link for the Safe Harbor Policy
The old link is broken, this is updating the link to the current Safe Harbor Policy
2 years ago
Ashley Wolf efa4a30c25
Merging rules for repolinter 2 years ago
Zack Koppert 6c51705ae4
Create repolinter-ruleset.json 2 years ago
Ashley Wolf 0b9abf27f2
Updating security email address
To reduce spam
2 years ago
Ashley Wolf ade2246a24
update security.md
Updating security.md file
2 years ago
Ashley Wolf 5540da0237
Updating security.md file 2 years ago
Nihaal Sangha c91f25fc4e
Fix inconsistent trailing slash 3 years ago
Fayas Noushad 876085dde5
Added hyperlink on @GitHub 3 years ago
Matthias Wenz abd807e291
Guitars rock more than rocks! 3 years ago
Daniel Adams fd1446b693
Add org README (#105) 3 years ago

@ -18,7 +18,7 @@ Please note that this project is released with a Contributor Code of Conduct. By
Here are a few things you can do that will increase the likelihood of your pull request being accepted:
- Follow standards for style and code quality
- Follow standards for style and code quality.
- Write tests.
- Keep your change as focused as possible. If there are multiple changes you would like to make that are not dependent upon each other, consider submitting them as separate pull requests.
- Write a [good commit message](http://tbaggery.com/2008/04/19/a-note-about-git-commit-messages.html).

@ -1,5 +1,5 @@
# .github
*Community health files for the @GitHub organization*
*Community health files for the [@GitHub](https://github.com/github) organization*
For more information, please see the article on [creating a default community health file for your organization](https://help.github.com/en/articles/creating-a-default-community-health-file-for-your-organization).

@ -1,7 +1,31 @@
# GitHub Security Policy
Thanks for helping make GitHub safe for everyone.
GitHub's [Bug Bounty program](https://bounty.github.com) rewards researchers for discovering security vulnerabilities in a number of repositories. The full list of projects that are eligible for rewards are [available on our Bug Bounty site](https://bounty.github.com/#scope).
## Security
If the repository is eligible for rewards, you can submit a report via [HackerOne](https://hackerone.com/github). You can find more useful information in our [rules](https://bounty.github.com/#rules) and [FAQ](https://bounty.github.com/#faqs).
GitHub takes the security of our software products and services seriously, including all of the open source code repositories managed through our GitHub organizations, such as [GitHub](https://github.com/GitHub).
For repositories not covered by the Bug Bounty program, please open an issue.
Even though [open source repositories are outside of the scope of our bug bounty program](https://bounty.github.com/index.html#scope) and therefore not eligible for bounty rewards, we will ensure that your finding gets passed along to the appropriate maintainers for remediation.
## Reporting Security Issues
If you believe you have found a security vulnerability in any GitHub-owned repository, please report it to us through coordinated disclosure.
**Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests.**
Instead, please send an email to opensource-security[@]github.com.
Please include as much of the information listed below as you can to help us better understand and resolve the issue:
* The type of issue (e.g., buffer overflow, SQL injection, or cross-site scripting)
* Full paths of source file(s) related to the manifestation of the issue
* The location of the affected source code (tag/branch/commit or direct URL)
* Any special configuration required to reproduce the issue
* Step-by-step instructions to reproduce the issue
* Proof-of-concept or exploit code (if possible)
* Impact of the issue, including how an attacker might exploit the issue
This information will help us triage your report more quickly.
## Policy
See [GitHub's Safe Harbor Policy](https://docs.github.com/en/site-policy/security-policies/github-bug-bounty-program-legal-safe-harbor)

@ -0,0 +1,70 @@
{
"$schema": "https://raw.githubusercontent.com/prototypicalpro/repolinter/master/rulesets/schema.json",
"version": 2,
"axioms": {},
"rules": {
"license-file-is-MIT": {
"level": "warning",
"rule": {
"type": "file-contents",
"options": {
"globsAll": ["LICENSE*", "COPYING*"],
"nocase": true,
"fail-on-non-existant": true,
"content": "MIT License"
}
},
"fix": {
"type": "file-create",
"options": {
"file": "LICENSE",
"replace": true,
"text": { "url": "https://opensource.org/licenses/MIT" }
}
},
"policyInfo": "MIT License is required for code or legal approval for an alternative",
"policyUrl": "https://github.com/github/open-source/blob/main/policies/release.md"
},
"readme-file-exists": {
"level": "warning",
"rule": {
"type": "file-existence",
"options": {
"globsAny": ["README*"],
"nocase": true
}
},
"fix": {
"type": "file-create",
"options": {
"file": "README.md",
"text": { "url": "https://raw.githubusercontent.com/newrelic/open-source-tools/master/nerdpacks/oss-template/README.md" }
}
},
"policyInfo": "GitHub requires a README file in all projects. This README should give a general overview of the project, and should point to additional resources (security, contributing, etc.) where developers and users can learn further",
"policyUrl": "https://github.com/github/open-source/blob/main/policies/release.md"
},
"codeowners-file-exists": {
"level": "warning",
"rule": {
"type": "file-existence",
"options": {
"globsAny": ["CODEOWNERS*", "*/CODEOWNERS*", ".github/CODEOWNERS*"],
"nocase": true
}
},
"fix": {
"type": "file-create",
"options": {
"file": "CODEOWNERS",
"text": { "url": "https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners" }
}
},
"policyInfo": "GitHub requires a CODEOWNERS file in all projects. This enables GitHub to contact the maintainers in the event it is necessary.",
"policyUrl": "https://github.com/github/open-source/blob/main/policies/release.md"
},
},
"formatOptions": {
"disclaimer": "🤖*This issue was automatically generated by [repolinter-action](https://github.com/newrelic/repolinter-action), developed by the Open Source and Developer Advocacy team at New Relic.*"
}
}

@ -0,0 +1,52 @@
## Hey, this is us 👋
![An illustration showing a variety of differently themed Octocats. Monuments from different cities are indicated in the background like the Space Needle, Berlin Fernsehturm and Transamerica Pyramid.](https://user-images.githubusercontent.com/3369400/133268513-5bfe2f93-4402-42c9-a403-81c9e86934b6.jpeg)
Yes, we are building GitHub on GitHub. In fact, weve been doing this since **October 19th, 2007**. That's when we made our first commit. Since then we pushed **over 2.5 million commits**, opened **over 1 million issues**, submitted roughly **650k pull requests** across **4357 repositories** from over **50 countries** 🤯. But that's just us. We are proud to be part of the work of millions of developers, companies and robots across the solar system 🪐. Yes, [Robots](https://github.com/readme/featured/nasa-ingenuity-helicopter)!
### 🍿 An interconnected community
The open source community is the 💗 heart of GitHub and fundamental to how we build software today. See for yourself:
- [GitHub Sponsors](https://github.com/sponsors) helped support more than **5k** individuals and projects around the world 🌍
- Open source projects on GitHub received a stunning **218 million** contributions 🚀 in the last year alone
- **Every minute** a developer creates a new release 🏄 for a public project on GitHub
Now that we are talking about the important things ☝️, are you contributing to open source? Yes? Okay, you rock! 🎸 If not, we can help you get started! Open source software is made by people just like you. Learn more about [how to contribute](https://opensource.guide/).
### 🦦 Contributing to the ecosystem
We contribute to the tools 🔧 we rely on to build and run GitHub, while also maintaining 🧙‍♂️ our own open source projects like:
- [GitHub CLI](https://github.com/cli/cli) - A command line tool for GitHub
- [Git Large File Storage](https://github.com/git-lfs/git-lfs) - A git extension for versioning large files
- [Primer](https://github.com/primer/css) - The GitHub design system
### 👓 Appendix
See what's next on our [public roadmap](https://github.com/github/roadmap) ✨ and [let us know](https://github.com/github/feedback) if you have any suggestions 🙇‍♂️. Oh, and by the way, we are always hiring talented, passionate people to [join our team](https://github.com/about/careers) 🙌.
<details>
<summary>"Tell me more, I can't get enough!"</summary>
<br>
<ul>
<li>GitHub is built using mighty 🔨 open source technologies like <a href="https://github.com/rails">Ruby on Rails</a>, <a href="https://github.com/golang">Go</a>, <a href="https://github.com/primer">Primer</a>, <a href="https://github.com/reactjs">React</a> and <a href="https://github.com/apache/kafka">Kafka</a> among others.</li>
<li>The three open source projects GitHub members have most contributed 👩‍💻 to are:
<ul>
<li><a href="https://github.com/microsoft/vscode">Visual Studio Code</a></li>
<li><a href="https://github.com/rails/rails">Ruby on Rails</a></li>
<li><a href="https://github.com/Homebrew">Homebrew</a></li>
</ul>
</li>
<li>By the way, our <a href="https://github.com/github/docs">documentation</a> 🤓 is also open sourced</li>
</ul>
</details>
---
<sub>🤫 Psst! You can create your own [organization README](https://docs.github.com/en/organizations/collaborating-with-groups-in-organizations/customizing-your-organizations-profile).</sub>
<!--
Made with 🖤
🙇‍♂️🎤⬇️
-->
Loading…
Cancel
Save