From 271868f202c01e5d7ba1bdd6d5042f57975e60cb Mon Sep 17 00:00:00 2001 From: John Lillis Date: Tue, 10 Nov 2020 17:32:08 -0500 Subject: [PATCH 1/6] Create CODE_OF_CONDUCT.md --- .github/CODE_OF_CONDUCT.md | 1 + 1 file changed, 1 insertion(+) create mode 100644 .github/CODE_OF_CONDUCT.md diff --git a/.github/CODE_OF_CONDUCT.md b/.github/CODE_OF_CONDUCT.md new file mode 100644 index 000000000..08f349603 --- /dev/null +++ b/.github/CODE_OF_CONDUCT.md @@ -0,0 +1 @@ +Please refer to the [forum rules](https://forum.mtasa.com/topic/12275-forum-rules/). From a9d8123474bdeb23aea154fabfdc0f0f7a4ee9ee Mon Sep 17 00:00:00 2001 From: John Lillis Date: Tue, 10 Nov 2020 17:33:06 -0500 Subject: [PATCH 2/6] Create FUNDING.yml --- .github/FUNDING.yml | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 .github/FUNDING.yml diff --git a/.github/FUNDING.yml b/.github/FUNDING.yml new file mode 100644 index 000000000..b50318e91 --- /dev/null +++ b/.github/FUNDING.yml @@ -0,0 +1,8 @@ +# These are supported funding model platforms + +github: # Replace with up to 4 GitHub Sponsors-enabled usernames e.g., [user1, user2] +patreon: # Replace with a single Patreon username +open_collective: # Replace with a single Open Collective username +ko_fi: # Replace with a single Ko-fi username +tidelift: # Replace with a single Tidelift platform-name/package-name e.g., npm/babel +custom: https://www.multitheftauto.com/donate/ # Replace with a single custom sponsorship URL From 02df2618beb47aa0acf3364d0fb1311dc9f2c05e Mon Sep 17 00:00:00 2001 From: John Lillis Date: Tue, 10 Nov 2020 17:34:03 -0500 Subject: [PATCH 3/6] Create SECURITY.md --- .github/SECURITY.md | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 .github/SECURITY.md diff --git a/.github/SECURITY.md b/.github/SECURITY.md new file mode 100644 index 000000000..1c9409820 --- /dev/null +++ b/.github/SECURITY.md @@ -0,0 +1,19 @@ +# Reporting a Vulnerability + +Before disclosing a cheat or security vulnerability, please do not try and check that they work +as they could either result in you getting globally banned or infected by a virus. + +Please submit your security vulnerabilities and cheats to our [private bugtracker]. + +Please do not submit vulnerabilities and cheats publicly, on GitHub or anywhere else. + +[private bugtracker]: https://forum.mtasa.com/forum/156-private-bugs/ + +## Bug Bounty + +We also run a bug bounty programme. Please read +["Bounty for finding security flaws and working cheats in MTA"][bounty] for more details. + +Payment is by PayPal only -- please include your PayPal email when posting on the [private bugtracker]. + +[bounty]: https://forum.mtasa.com/topic/66858-bounty-for-finding-security-flaws-and-working-cheats-in-mta/ From 6c7b1f45675bc10566581d57c06b4e7b7d55a620 Mon Sep 17 00:00:00 2001 From: John Lillis Date: Tue, 10 Nov 2020 17:49:52 -0500 Subject: [PATCH 4/6] Update security_report.md with current disclosure guidance --- .github/ISSUE_TEMPLATE/security_report.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/ISSUE_TEMPLATE/security_report.md b/.github/ISSUE_TEMPLATE/security_report.md index 30766a6ff..7eaf0fd15 100644 --- a/.github/ISSUE_TEMPLATE/security_report.md +++ b/.github/ISSUE_TEMPLATE/security_report.md @@ -4,6 +4,6 @@ about: Submit security vulnerability --- -Please submit your security vulnerabilities to @ccw on forum.mtasa.com. Please do not submit them here. +# 🛑 **DO NOT DISCLOSE SECURITY VULNERABILITIES PUBLICLY** 🛑 -@ccw can be found here: https://forum.mtasa.com/profile/7264-ccw/ +## Please refer to [SECURITY.md](../SECURITY.md) for instructions on how to report security vulnerabilities responsibly. From 0c7f6a7f110ccc115660ee36a3ea184cbcfc152a Mon Sep 17 00:00:00 2001 From: John Lillis Date: Tue, 10 Nov 2020 18:27:59 -0500 Subject: [PATCH 5/6] Update admin2 CODEOWNERS entry --- .github/CODEOWNERS | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/CODEOWNERS b/.github/CODEOWNERS index 4f8ba26a3..79c30321b 100644 --- a/.github/CODEOWNERS +++ b/.github/CODEOWNERS @@ -1 +1 @@ -/\[admin\]/admin2 @lil-Toady @Cazomino05 @qaisjp +/\[admin\]/admin2 @qaisjp @jlillis From 2fa6585985b2cb391971d00b3fb8a5e46f176136 Mon Sep 17 00:00:00 2001 From: John Lillis Date: Tue, 10 Nov 2020 19:48:23 -0500 Subject: [PATCH 6/6] Create ISSUE_TEMPLATE\config.yml; disallow blank issues --- .github/ISSUE_TEMPLATE/config.yml | 1 + 1 file changed, 1 insertion(+) create mode 100644 .github/ISSUE_TEMPLATE/config.yml diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml new file mode 100644 index 000000000..3ba13e0ce --- /dev/null +++ b/.github/ISSUE_TEMPLATE/config.yml @@ -0,0 +1 @@ +blank_issues_enabled: false