diff --git a/modules/plain-repo/files/SECURITY.md b/modules/plain-repo/files/SECURITY.md new file mode 100644 index 0000000..6499f88 --- /dev/null +++ b/modules/plain-repo/files/SECURITY.md @@ -0,0 +1,52 @@ +# Security Policy + +## Reporting a Vulnerability + +We take security seriously. If you discover a security vulnerability in this project, please report it responsibly. + +**Please DO NOT create a public GitHub issue for security vulnerabilities.** + +### How to Report + +Send an email to **security@infrahouse.com** with: + +- Description of the vulnerability +- Steps to reproduce +- Potential impact +- Any suggested fixes (optional) + +### What to Expect + +- **Acknowledgment:** Within 48 hours of your report +- **Initial Assessment:** Within 5 business days +- **Resolution Timeline:** Depends on severity, typically 30-90 days + +### Scope + +This policy applies to: + +- The Terraform module code in this repository +- Associated documentation and examples + +### Out of Scope + +- Issues in upstream dependencies (report to respective maintainers) +- Issues in AWS services (report to AWS) + +## Security Best Practices + +When using this module: + +- Follow the principle of least privilege for IAM roles +- Enable encryption at rest and in transit where applicable +- Review the module's security group and IAM policy configurations +- Keep the module updated to the latest version + +## Supported Versions + +We provide security updates for the latest major version only. + +| Version | Supported | +| ------- | ------------------ | +| Latest | :white_check_mark: | +| Older | :x: | \ No newline at end of file diff --git a/modules/plain-repo/repos-files.tf b/modules/plain-repo/repos-files.tf index 0a4c740..048b4c1 100755 --- a/modules/plain-repo/repos-files.tf +++ b/modules/plain-repo/repos-files.tf @@ -156,6 +156,18 @@ resource "github_repository_file" "release_workflow" { overwrite_on_create = true } +resource "github_repository_file" "security_md" { + count = var.repo_type == "terraform_module" ? 1 : 0 + depends_on = [ + github_repository_ruleset.main + ] + repository = github_repository.repo.name + file = "SECURITY.md" + content = file("${path.module}/files/SECURITY.md") + commit_message = "Add SECURITY.md" + overwrite_on_create = true +} + resource "github_repository_file" "docs_index" { count = var.repo_type == "terraform_module" ? 1 : 0 depends_on = [ diff --git a/modules/plain-repo/repos.tf b/modules/plain-repo/repos.tf index ee61eab..bc01599 100755 --- a/modules/plain-repo/repos.tf +++ b/modules/plain-repo/repos.tf @@ -12,10 +12,6 @@ resource "github_repository" "repo" { for_each = var.enable_pages ? [1] : [] content { build_type = "workflow" - source { - branch = "main" - path = "/" - } } } }