Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 15 additions & 0 deletions .github/ISSUE_TEMPLATE/bug_report.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,21 @@ labels: bug
assignees: ''
---

**Priority**
- [ ] P1 - Critical: System completely broken, data loss
- [ ] P2 - High: Major functionality broken
- [ ] P3 - Medium: Minor functionality affected
- [ ] P4 - Low: Minor issue, cosmetic

**Component**
- [ ] Backend
- [ ] Frontend
- [ ] AI Engine
- [ ] Database
- [ ] Documentation
- [ ] CI/CD
- [ ] Other
Comment on lines +9 to +22
Copy link

Copilot AI Mar 7, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These issue template changes (Priority/Component sections) are unrelated to the PR description about mutation testing/structlog. Please update the PR description to include them or split them into a separate PR to avoid mixing workflow changes with dependency fixes.

Copilot uses AI. Check for mistakes.

**Describe the bug**
A clear and concise description of what the bug is.

Expand Down
6 changes: 6 additions & 0 deletions .github/ISSUE_TEMPLATE/config.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,12 @@ labels: configuration
assignees: ''
---

**Priority**
- [ ] P1 - Critical: System cannot start or deploy
- [ ] P2 - High: Major configuration issue
- [ ] P3 - Medium: Minor configuration issue
- [ ] P4 - Low: Cosmetic or improvement

**Type of configuration issue**
- [ ] Environment variable
- [ ] Docker configuration
Expand Down
15 changes: 15 additions & 0 deletions .github/ISSUE_TEMPLATE/documentation.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,21 @@ labels: documentation
assignees: ''
---

**Priority**
- [ ] P1 - Critical: Documentation missing for critical feature
- [ ] P2 - High: Major documentation issue
- [ ] P3 - Medium: Minor documentation issue
- [ ] P4 - Low: Cosmetic or low priority

**Component**
- [ ] Backend
- [ ] Frontend
- [ ] AI Engine
- [ ] Database
- [ ] Documentation
- [ ] CI/CD
- [ ] Other

**Type of documentation issue**
- [ ] Typo or grammatical error
- [ ] Missing information
Expand Down
15 changes: 15 additions & 0 deletions .github/ISSUE_TEMPLATE/feature_request.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,21 @@ labels: enhancement
assignees: ''
---

**Priority**
- [ ] P1 - Critical: Must have for project success
- [ ] P2 - High: Important feature
- [ ] P3 - Medium: Nice to have
- [ ] P4 - Low: Future consideration

**Component**
- [ ] Backend
- [ ] Frontend
- [ ] AI Engine
- [ ] Database
- [ ] Documentation
- [ ] CI/CD
- [ ] Other

**Is your feature request related to a problem? Please describe.**
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

Expand Down
15 changes: 15 additions & 0 deletions .github/ISSUE_TEMPLATE/question.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,21 @@ labels: question
assignees: ''
---

**Priority**
- [ ] P1 - Critical: Urgent question blocking progress
- [ ] P2 - High: Important question
- [ ] P3 - Medium: General question
- [ ] P4 - Low: Curiosity

**Component**
- [ ] Backend
- [ ] Frontend
- [ ] AI Engine
- [ ] Database
- [ ] Documentation
- [ ] CI/CD
- [ ] Other

**Question**
What do you want to ask or discuss?

Expand Down
68 changes: 68 additions & 0 deletions SECURITY.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,68 @@
# Security Policy

## Reporting a Vulnerability

We take security vulnerabilities seriously. If you discover a security issue, please report it responsibly.

Comment on lines +1 to +6
Copy link

Copilot AI Mar 7, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This PR introduces additional scope beyond the stated goal of fixing CI mutation testing (adds a new SECURITY.md). Please either update the PR description to cover this change or move the security policy addition into a separate PR to keep review/rollback focused.

Copilot uses AI. Check for mistakes.
### How to Report

**Please DO NOT report security vulnerabilities through public GitHub issues.**

Instead, please report them via one of the following methods:

1. **GitHub Security Advisories**: Use the [GitHub Security Advisory](https://github.com/anchapin/ModPorter-AI/security/advisories/new) to report vulnerabilities privately.

2. **Email**: Contact us at **alex** (you can find the email associated with the GitHub account @anchapin).

### What to Include

When reporting a security vulnerability, please include:

- Type of vulnerability (e.g., XSS, SQL injection, etc.)
- Full paths of source file(s) related to the vulnerability
- Location of the affected source code (tag/branch/commit or direct URL)
- Step-by-step instructions to reproduce the issue
- Proof-of-concept or exploit code (if possible)
- Impact assessment of the vulnerability

## Disclosure Process

Once we receive a security vulnerability report:

1. **Acknowledgment**: We will acknowledge receipt of your report within 48 hours.

2. **Initial Assessment**: We will conduct an initial assessment to determine the severity and validity of the vulnerability.

3. **Regular Updates**: We will provide updates on the progress of addressing the vulnerability every 7 days.

4. **Resolution**: We will work on a fix and test the solution.

5. **Public Disclosure**: Once the vulnerability has been addressed, we will publicly disclose the details in the release notes.

## Supported Versions

We currently support the following versions with security updates:

| Version | Supported |
| ------- | ------------------ |
| 1.0.x | :white_check_mark: |

## Security Best Practices

When contributing to ModPorter-AI, please follow these security best practices:

- Never commit sensitive information (API keys, passwords, tokens) to the repository
- Use environment variables for configuration secrets
- Follow the principle of least privilege
- Keep dependencies up to date
- Run security checks before submitting PRs

## Security-Related Configuration

For deployment security configurations, see:
- [Security Configuration Guide](.github/security-config-guide.md)
- [Security Check Script](.github/security-check.sh)

## Credits

We appreciate the efforts of security researchers and contributors who help us keep ModPorter-AI secure. With your permission, we will acknowledge your contribution in the security advisory.
1 change: 1 addition & 0 deletions ai-engine/pyproject.toml
Original file line number Diff line number Diff line change
Expand Up @@ -245,6 +245,7 @@ dependencies = [
# Monitoring
"prometheus-client",
"psutil",
"structlog>=24.0.0",
]

[project.optional-dependencies]
Expand Down
1 change: 1 addition & 0 deletions ai-engine/setup.py
Original file line number Diff line number Diff line change
Expand Up @@ -64,6 +64,7 @@ def get_install_requires():
# Monitoring
"prometheus-client",
"psutil",
"structlog>=24.0.0",
]


Expand Down
1 change: 1 addition & 0 deletions backend/setup.py
Original file line number Diff line number Diff line change
Expand Up @@ -28,5 +28,6 @@
'ruff==0.15.1',
'black==26.1.0',
'python-dotenv==1.2.1',
'structlog>=24.0.0',
],
)