From f07ca25c3b551a385b9fdee3ec5633a3a18eed8f Mon Sep 17 00:00:00 2001 From: reeshika-h Date: Mon, 17 Feb 2025 10:28:28 +0530 Subject: [PATCH] Added security file --- SECURITY.md | 27 +++++++++++++++++++++++++++ test/run_test | 4 ++-- 2 files changed, 29 insertions(+), 2 deletions(-) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..88da02e --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,27 @@ +# Security + +Contentstack takes the security of our software products and services seriously, which includes all source code repositories managed through our GitHub organizations. + +If you believe you have found a security vulnerability in any Contentstack-owned repository, please report it to us as described below. + +## Reporting Security Issues + +**Please do not report security vulnerabilities through public GitHub issues.** + +Send email to [security@contentstack.com](mailto:security@contentstack.com). + +You should receive a response within 24 hours. If for some reason you do not, please follow up via email to ensure we received your original message. + +Please include the requested information listed below (as much as you can provide) to help us better understand the nature and scope of the possible issue: + +- Type of issue (e.g. buffer overflow, SQL injection, cross-site scripting, etc.) +- Full paths of source file(s) related to the manifestation of the issue +- The location of the affected source code (tag/branch/commit or direct URL) +- Any special configuration required to reproduce the issue +- Step-by-step instructions to reproduce the issue +- Proof-of-concept or exploit code (if possible) +- Impact of the issue, including how an attacker might exploit the issue + +This information will help us triage your report more quickly. + +[https://www.contentstack.com/trust/](https://www.contentstack.com/trust/) diff --git a/test/run_test b/test/run_test index 10f6623..1b3c827 100644 --- a/test/run_test +++ b/test/run_test @@ -1,4 +1,4 @@ -pub global run remove_from_coverage:remove_from_coverage -f coverage/lcov.info -r '\.g\.dart$' +dart pub global run remove_from_coverage:remove_from_coverage -f coverage/lcov.info -r '\.g\.dart$' ## Run Dart tests and output them at directory `./coverage`: @@ -8,7 +8,7 @@ dart run test --coverage=./coverage dart pub global activate coverage ## Format collected coverage to LCOV (only for directory "lib") -pub global run coverage:format_coverage --packages=.packages --report-on=lib --lcov -o ./coverage/lcov.info -i ./coverage +dart pub global run coverage:format_coverage --package=. --report-on=lib --lcov -o ./coverage/lcov.info -i ./coverage ## Generate LCOV report: genhtml -o ./coverage/report ./coverage/lcov.info