Repository navigation
docs: add community health defaults and security policy - #4
Merged
Merged
Conversation
- add SECURITY.md with community-versus-official routing and a private fallback intake (modex and community-blog have private reporting off) - add CODE_OF_CONDUCT.md, SUPPORT.md, default issue forms with official support contact links, and a PR template with a mocked/live evidence check - expand CONTRIBUTING.md with workflow, evidence, and agent-assisted rules - cross-link the new files from README, profile, AGENTS.md, llms.txt, and the discovery index Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
There was a problem hiding this comment.
Copilot review overview
🟡 Changes recommended
The conduct policy lacks an actionable private reporting channel, and the bug form prevents the requested screenshot attachments.
Review effort: Balanced
Findings: 1
Open (3)
What changed in this PR
Adds organization-wide community health defaults, contributor guidance, and cross-links while preserving the community/official support boundary.
Changes:
- Adds conduct, security, support, issue, and pull-request templates.
- Expands contribution and verification guidance.
- Links the policies throughout repository navigation.
| File | Description |
|---|---|
AGENTS.md |
Documents requirements for community defaults. |
CODE_OF_CONDUCT.md |
Adds conduct and enforcement policy. |
CONTRIBUTING.md |
Expands contribution and safety guidance. |
ISSUE_TEMPLATE/bug_report.yml |
Adds structured bug reporting. |
ISSUE_TEMPLATE/config.yml |
Adds support and security links. |
ISSUE_TEMPLATE/feature_request.yml |
Adds feature proposal form. |
PULL_REQUEST_TEMPLATE.md |
Adds evidence and safety checklist. |
README.md |
Documents organization defaults. |
SECURITY.md |
Defines private vulnerability reporting. |
SUPPORT.md |
Separates community and official support. |
docs/discovery/README.md |
Documents inherited health files. |
llms.txt |
Adds policy navigation links. |
profile/README.md |
Surfaces support and security policies. |
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
|
|
||
| ## Reporting | ||
|
|
||
| Report conduct concerns privately to the organization moderator, [@BunsDev](https://github.com/BunsDev), or to a maintainer of the affected repository through a private channel you have already verified. You can also use GitHub's [report content](https://docs.github.com/en/communities/maintaining-your-safety-on-github/reporting-abuse-or-spam) tools. Do not post sensitive evidence publicly. |
| id: mode | ||
| attributes: | ||
| label: Mode | ||
| description: Was this against mocked/demo data or a live TypeSafe API call? |
Comment on lines
+47
to
+52
| - type: textarea | ||
| id: logs | ||
| attributes: | ||
| label: Logs, output, or screenshots | ||
| description: Redact keys and personal data. | ||
| render: shell |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
jev-harnessas fallback intake because private reporting is off inmodexandcommunity-blog. No response-time promises.Verification
ruby -ryamlparses all three issue forms.gh api repos/TypeSafeAI/<repo>/private-vulnerability-reporting.🤖 Generated with Claude Code