-
Notifications
You must be signed in to change notification settings - Fork 0
fix: CI Mutation Testing failing due to missing structlog module (issue #738) #740
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
Merged
Changes from all commits
Commits
Show all changes
3 commits
Select commit
Hold shift + click to select a range
File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,68 @@ | ||
| # Security Policy | ||
|
|
||
| ## Reporting a Vulnerability | ||
|
|
||
| We take security vulnerabilities seriously. If you discover a security issue, please report it responsibly. | ||
|
|
||
|
Comment on lines
+1
to
+6
|
||
| ### How to Report | ||
|
|
||
| **Please DO NOT report security vulnerabilities through public GitHub issues.** | ||
|
|
||
| Instead, please report them via one of the following methods: | ||
|
|
||
| 1. **GitHub Security Advisories**: Use the [GitHub Security Advisory](https://github.com/anchapin/ModPorter-AI/security/advisories/new) to report vulnerabilities privately. | ||
|
|
||
| 2. **Email**: Contact us at **alex** (you can find the email associated with the GitHub account @anchapin). | ||
|
|
||
| ### What to Include | ||
|
|
||
| When reporting a security vulnerability, please include: | ||
|
|
||
| - Type of vulnerability (e.g., XSS, SQL injection, etc.) | ||
| - Full paths of source file(s) related to the vulnerability | ||
| - Location of the affected source code (tag/branch/commit or direct URL) | ||
| - Step-by-step instructions to reproduce the issue | ||
| - Proof-of-concept or exploit code (if possible) | ||
| - Impact assessment of the vulnerability | ||
|
|
||
| ## Disclosure Process | ||
|
|
||
| Once we receive a security vulnerability report: | ||
|
|
||
| 1. **Acknowledgment**: We will acknowledge receipt of your report within 48 hours. | ||
|
|
||
| 2. **Initial Assessment**: We will conduct an initial assessment to determine the severity and validity of the vulnerability. | ||
|
|
||
| 3. **Regular Updates**: We will provide updates on the progress of addressing the vulnerability every 7 days. | ||
|
|
||
| 4. **Resolution**: We will work on a fix and test the solution. | ||
|
|
||
| 5. **Public Disclosure**: Once the vulnerability has been addressed, we will publicly disclose the details in the release notes. | ||
|
|
||
| ## Supported Versions | ||
|
|
||
| We currently support the following versions with security updates: | ||
|
|
||
| | Version | Supported | | ||
| | ------- | ------------------ | | ||
| | 1.0.x | :white_check_mark: | | ||
|
|
||
| ## Security Best Practices | ||
|
|
||
| When contributing to ModPorter-AI, please follow these security best practices: | ||
|
|
||
| - Never commit sensitive information (API keys, passwords, tokens) to the repository | ||
| - Use environment variables for configuration secrets | ||
| - Follow the principle of least privilege | ||
| - Keep dependencies up to date | ||
| - Run security checks before submitting PRs | ||
|
|
||
| ## Security-Related Configuration | ||
|
|
||
| For deployment security configurations, see: | ||
| - [Security Configuration Guide](.github/security-config-guide.md) | ||
| - [Security Check Script](.github/security-check.sh) | ||
|
|
||
| ## Credits | ||
|
|
||
| We appreciate the efforts of security researchers and contributors who help us keep ModPorter-AI secure. With your permission, we will acknowledge your contribution in the security advisory. | ||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -64,6 +64,7 @@ def get_install_requires(): | |
| # Monitoring | ||
| "prometheus-client", | ||
| "psutil", | ||
| "structlog>=24.0.0", | ||
| ] | ||
|
|
||
|
|
||
|
|
||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -28,5 +28,6 @@ | |
| 'ruff==0.15.1', | ||
| 'black==26.1.0', | ||
| 'python-dotenv==1.2.1', | ||
| 'structlog>=24.0.0', | ||
| ], | ||
| ) | ||
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
These issue template changes (Priority/Component sections) are unrelated to the PR description about mutation testing/structlog. Please update the PR description to include them or split them into a separate PR to avoid mixing workflow changes with dependency fixes.