Skip to content

Commit fa51d9f

Browse files
Update .md file and link security.md to bug bounty (#244)
* Update .md file and link security.md to bug bounty * Move security and code of conduct md file in root directory
1 parent 47eef00 commit fa51d9f

File tree

3 files changed

+113
-2
lines changed

3 files changed

+113
-2
lines changed

CODE_OF_CONDUCT.md

Lines changed: 76 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,76 @@
1+
# Contributor Covenant Code of Conduct
2+
3+
## Our Pledge
4+
5+
In the interest of fostering an open and welcoming environment, we as
6+
contributors and maintainers pledge to making participation in our project and
7+
our community a harassment-free experience for everyone, regardless of age, body
8+
size, disability, ethnicity, sex characteristics, gender identity and expression,
9+
level of experience, education, socio-economic status, nationality, personal
10+
appearance, race, religion, or sexual identity and orientation.
11+
12+
## Our Standards
13+
14+
Examples of behavior that contributes to creating a positive environment
15+
include:
16+
17+
* Using welcoming and inclusive language
18+
* Being respectful of differing viewpoints and experiences
19+
* Gracefully accepting constructive criticism
20+
* Focusing on what is best for the community
21+
* Showing empathy towards other community members
22+
23+
Examples of unacceptable behavior by participants include:
24+
25+
* The use of sexualized language or imagery and unwelcome sexual attention or
26+
advances
27+
* Trolling, insulting/derogatory comments, and personal or political attacks
28+
* Public or private harassment
29+
* Publishing others' private information, such as a physical or electronic
30+
address, without explicit permission
31+
* Other conduct which could reasonably be considered inappropriate in a
32+
professional setting
33+
34+
## Our Responsibilities
35+
36+
Project maintainers are responsible for clarifying the standards of acceptable
37+
behavior and are expected to take appropriate and fair corrective action in
38+
response to any instances of unacceptable behavior.
39+
40+
Project maintainers have the right and responsibility to remove, edit, or
41+
reject comments, commits, code, wiki edits, issues, and other contributions
42+
that are not aligned to this Code of Conduct, or to ban temporarily or
43+
permanently any contributor for other behaviors that they deem inappropriate,
44+
threatening, offensive, or harmful.
45+
46+
## Scope
47+
48+
This Code of Conduct applies both within project spaces and in public spaces
49+
when an individual is representing the project or its community. Examples of
50+
representing a project or community include using an official project e-mail
51+
address, posting via an official social media account, or acting as an appointed
52+
representative at an online or offline event. Representation of a project may be
53+
further defined and clarified by project maintainers.
54+
55+
## Enforcement
56+
57+
Instances of abusive, harassing, or otherwise unacceptable behavior may be
58+
reported by contacting the project team at [email protected]. All
59+
complaints will be reviewed and investigated and will result in a response that
60+
is deemed necessary and appropriate to the circumstances. The project team is
61+
obligated to maintain confidentiality with regard to the reporter of an incident.
62+
Further details of specific enforcement policies may be posted separately.
63+
64+
Project maintainers who do not follow or enforce the Code of Conduct in good
65+
faith may face temporary or permanent repercussions as determined by other
66+
members of the project's leadership.
67+
68+
## Attribution
69+
70+
This Code of Conduct is adapted from the [Contributor Covenant][homepage], version 1.4,
71+
available at <https://www.contributor-covenant.org/version/1/4/code-of-conduct.html>
72+
73+
[homepage]: https://www.contributor-covenant.org
74+
75+
For answers to common questions about this code of conduct, see
76+
<https://www.contributor-covenant.org/faq>

SECURITY.md

Lines changed: 37 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,37 @@
1+
# Security Policy
2+
3+
This document outlines security procedures and general policies for the `fetchd` project.
4+
5+
## Reporting a Vulnerability
6+
7+
The `fetchd` team and community take all security bugs in `fetchd` seriously. We appreciate your efforts and responsible disclosure and will make every effort to acknowledge your contributions.
8+
9+
Report security bugs by emailing `[email protected]`.
10+
11+
The lead maintainer will acknowledge your email within 48 hours, and will send a more detailed response within 48 hours indicating the next steps in handling your report. After the initial reply to your report, the security team will endeavour to keep you informed of the progress towards a fix and full announcement, and may ask for additional information or guidance.
12+
13+
Report security bugs in third-party modules to the person or team maintaining the module.
14+
15+
## Disclosure Policy
16+
17+
When the security team receives a security bug report, they will assign it to a primary handler. This person will coordinate the fix and release process, involving the following steps:
18+
19+
- Confirm the problem and determine the affected versions.
20+
- Audit code to find any potential similar problems.
21+
- Prepare fixes for all releases still under maintenance. These fixes will be released as fast as possible to PyPI.
22+
23+
## Comments on this Policy
24+
25+
If you have suggestions on how this process could be improved please submit a pull request.
26+
27+
## Bug Bounty
28+
29+
We have a [**bug bounty program**](https://docs.fetch.ai/bug_bounty/). Please report any security issues you find, or reach out to `[email protected]`. Please try to be as explicit as possible, describing all the steps and example code to reproduce the security issue.
30+
31+
Critical bug fixes will be backported to past major releases.
32+
33+
## Public Discussions
34+
35+
Please restrain from publicly discussing a potential security vulnerability. 🙊
36+
37+
It's better to discuss privately and try to find a solution first, to limit the potential impact as much as possible.

docs/CONTRIBUTING.md

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -22,12 +22,10 @@ Once the dependencies are setup you must activate the environment with the follo
2222

2323
This step should update your terminal prompt and you will be able to see that the command `mkdocs` is installed in your path
2424

25-
2625
which mkdocs
2726

2827
Finally, to start the development server run the following command
2928

30-
3129
mkdocs serve
3230

3331
This will listen for changes on the filesystem and automatically update the documentation.

0 commit comments

Comments
 (0)