Repository navigation
Clarify some of the common "this is not a security" bug type issues we receive - #712
Merged
holdenk merged 7 commits intoOct 27, 2026
Merged
Conversation
Co-Authored-By: Holden Karau <holden@pigscanfly.ca>
Co-Authored-By: Holden Karau <holden@pigscanfly.ca>
Co-Authored-By: Holden Karau <holden@pigscanfly.ca>
Co-authored-by: Cursor <cursoragent@cursor.com> Co-Authored-By: Holden Karau <holden@pigscanfly.ca>
Vendors may offer their own isolation or a multi-tenant version. Issues with those should be reported to the vendor. Co-authored-by: Holden Karau <holden@pigscanfly.ca> Co-authored-by: Holden Karau <holden.karau@snowflake.com> Co-authored-by: Cursor <cursoragent@cursor.com>
…ML is built remotely now (fancy). This reverts commit 65ff805.
holdenk
force-pushed
the
document-the-inverse-is-true-too
branch
from
October 26, 2026 23:05
90dd955 to
03d2a52
Compare
nchammas
approved these changes
Oct 27, 2026
nchammas
left a comment
nchammas
left a comment
Contributor
There was a problem hiding this comment.
I don't have insight into the kinds of security reports we get, but the added prose seems helpful to me.
One nit I have about the pre-existing markup here is that we are using HTML tags in security.md when we should use Markdown formatting. I'll probably fix this in a sweep across the repo, because it's a widespread problem that interferes (among other things) with AnchorJS's ability to auto-generate anchor links.
github-actions Bot
added a commit
that referenced
this pull request
Oct 27, 2026
…ssues we receive (#712)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
We get a lot of security reports that seem to misunderstand our security model. Try and clarify this a bit more for the people/robots (honestly probably the robots).
See: