Skip to content

Commit e0a0bc6

Browse files
rbs333claude
andcommitted
fix: drop dead applied.ai@redis.com address; route security to GitHub PVR
The applied.ai@redis.com mailbox doesn't exist, so: - SECURITY.md now directs vulnerability reports to GitHub's Private Vulnerability Reporting (Security tab → "Report a vulnerability"), which routes privately to maintainers, and points non-security reports to public GitHub issues. - Removed the email from pyproject.toml authors metadata; kept the Redis Inc. name. Otherwise the dead address ships in PyPI metadata for every release. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
1 parent 834d47b commit e0a0bc6

2 files changed

Lines changed: 15 additions & 11 deletions

File tree

SECURITY.md

Lines changed: 14 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -3,20 +3,24 @@
33
## Reporting a Vulnerability
44

55
If you believe you have discovered a security vulnerability in `sql-redis`,
6-
please **do not open a public GitHub issue or pull request**.
6+
please report it **privately** through GitHub's private vulnerability
7+
reporting:
78

8-
Instead, report it privately to the Redis applied AI team at
9-
**applied.ai@redis.com**.
9+
1. Go to the [Security tab](https://github.com/redis-developer/sql-redis/security)
10+
of the repository.
11+
2. Click **Report a vulnerability**.
12+
3. Fill in the form with a description of the issue, reproduction steps,
13+
affected versions, and any suggested mitigations.
1014

11-
Please include:
15+
This sends the report directly to maintainers without making it public, and
16+
gives us a place to coordinate the fix and disclosure timeline with you.
1217

13-
- A description of the issue and the potential impact.
14-
- Steps to reproduce the vulnerability (proof of concept, sample SQL, etc.).
15-
- The version of `sql-redis` and Redis you are using.
16-
- Any suggested mitigations, if you have them.
18+
**Please do not open a public GitHub issue or pull request** for security
19+
reports — that would disclose the vulnerability before a fix is available.
1720

18-
We will acknowledge receipt within five business days and work with you on a
19-
disclosure timeline.
21+
For non-security bugs and feature requests, regular
22+
[GitHub issues](https://github.com/redis-developer/sql-redis/issues) are the
23+
right place.
2024

2125
## Supported Versions
2226

pyproject.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ name = "sql-redis"
33
# NOTE: The version below is automatically incremented by the release workflow - do not manually adjust it.
44
version = "0.5.0"
55
description = "SQL to Redis command translation utility"
6-
authors = [{ name = "Redis Inc.", email = "applied.ai@redis.com" }]
6+
authors = [{ name = "Redis Inc." }]
77
requires-python = ">=3.9,<3.14"
88
readme = "README.md"
99
license = "MIT"

0 commit comments

Comments
 (0)