FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

docs: add security policy by WilliamBergamin · Pull Request #1511 · slackapi/bolt-python · GitHub

docs: add security policy - #1511

Merged
WilliamBergamin merged 1 commit into
mainfrom
security-policy
May 29, 2026
Merged

docs: add security policy#1511
WilliamBergamin merged 1 commit into
mainfrom
security-policy

Conversation

WilliamBergamin commented May 28, 2026
edited
Loading

Copy link
Copy Markdown
Contributor

Summary

  • Adds a SECURITY.md to .github/ with vulnerability reporting instructions, threat model, and disclosure policy
  • Directs reporters to the Slack HackerOne bug bounty program
  • Defines in-scope vulnerabilities (signature bypass, token leakage, DoS, auth bypass) and out-of-scope issues

closes: #1503

Category

  • slack_bolt.App and/or its core components
  • slack_bolt.async_app.AsyncApp and/or its core components
  • Adapters in slack_bolt.adapter
  • Document pages under /docs
  • Others

Requirements

Please read the Contributing guidelines and Code of Conduct before creating this issue or pull request. By submitting, you are agreeing to those rules.

  • I've read and understood the Contributing Guidelines and have done my best effort to follow them.
  • I've read and agree to the Code of Conduct.
  • I've run ./scripts/install_all_and_run_tests.sh after making the changes.

WilliamBergamin self-assigned this May 28, 2026
WilliamBergamin requested a review from a team as a code owner May 28, 2026 17:05
WilliamBergamin added docs Improvements or additions to documentation security labels May 28, 2026

codecov Bot commented May 28, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.30%. Comparing base (92d8516) to head (9a8318f).
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #1511   +/-   ##
=======================================
  Coverage   91.30%   91.30%           
=======================================
  Files         228      228           
  Lines        7271     7271           
=======================================
  Hits         6639     6639           
  Misses        632      632           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

srtaalej left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

⭐ ⭐ ⭐

zimeg left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

@WilliamBergamin Awesome writings that I hope aren't read most often 😉 🔏

Comment thread pyproject.toml

[project.urls]
Documentation = "https://docs.slack.dev/tools/bolt-python/"
Source = "https://github.com/slackapi/bolt-python"

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

🐍 ✨ praise: Adjacent improvements for better packages so much appreciated!

WilliamBergamin merged commit 886cc52 into main May 29, 2026
16 checks passed
WilliamBergamin deleted the security-policy branch May 29, 2026 14:04
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

docs Improvements or additions to documentation security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

chore: add a SECURITY.md file

3 participants


Back | FazBrowse Home | New Git URL