Skip to content

Publish maintainer and security responsibility statements #206

Closed

Description

@rmcdaniel

Purpose

Make Durable Workflow's maintainer and security responsibilities publicly attributable to Richard McDaniel (@rmcdaniel).

Acceptance

  • Publish the supplied Security maintainer section in the organization's default SECURITY.md.
  • Publish the supplied Maintainer section in profile/README.md so it appears on the organization page.
  • Preserve existing vulnerability-reporting instructions and any repository-specific policies.

The current default-branch trees of all 11 public repositories were checked. None contains its own SECURITY.md, so the organization-wide default covers this request without duplicating policy files across repositories. This change does not introduce a reporting address, response-time promise, or supported-version claim.

Activity

  1. rmcdaniel commented on Oct 19, 2026

    @rmcdaniel
    MemberAuthor

    Delivered in #207 at 9393c26ca88e81a2d43df5185662ba50fa75ec52.

    • Security policy: the supplied maintainer statement and responsibilities are published verbatim.
    • Organization profile: the supplied Maintainer section is publicly visible.
    • Checked every public repository's default-branch tree: none has a separate SECURITY.md. Live HTTP readback confirms the inherited statement on all 11 public Security policy pages.
    • Existing profile content is preserved. No vulnerability-reporting instructions were removed or replaced.
    • All three candidate checks and all three independent main checks pass, including SonarQube. The merged tree is identical to the reviewed/tested tree; the completed remote branch is deleted.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions