chore: replace generic emails with GitHub references#37
Conversation
Replace generic @netresearch.de email addresses with GitHub-native mechanisms (Issues, Security Advisories, repository URLs). - Remove email from package metadata (composer.json, ext_emconf.php) - Add support/issues URLs to package metadata - Replace security contact with GitHub Security Advisories - Replace support/contact emails with GitHub Issues links - Remove email from PHP docblock @author tags - Use OCI labels in Dockerfiles
Summary of ChangesHello @CybotTM, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed! This pull request modernizes the project's communication channels by transitioning from generic email addresses to GitHub's integrated features. The primary goal is to enhance security vulnerability reporting and general support by leveraging GitHub Security Advisories and Issues, thereby reducing spam and streamlining maintenance overhead. Highlights
Changelog
Using Gemini Code AssistThe full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips. Invoking Gemini You can request assistance from Gemini at any point by creating a comment using either
Customization To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a Limitations & Feedback Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here. You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension. Footnotes
|
There was a problem hiding this comment.
Code Review
This pull request updates the CONTRIBUTING.md file to replace a generic security email address with a link to GitHub Security Advisories. This is a good practice that centralizes security reporting through GitHub's dedicated feature, which helps in tracking and managing vulnerabilities privately and effectively. The change is correct and aligns with the goal of modernizing contact and support channels for the project. The implementation is sound and I have no further recommendations.
There was a problem hiding this comment.
Pull request overview
Replace public email-based contact points with GitHub-native support and security reporting links to reduce spam and standardize contribution workflows.
Changes:
- Updated security contact in contributing docs to point to GitHub Security Advisories (private reporting flow)
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| - **Issues**: [GitHub Issues](https://github.com/netresearch/phpbu-docker/issues) | ||
| - **Discussions**: [GitHub Discussions](https://github.com/netresearch/phpbu-docker/discussions) | ||
| - **Security**: security@netresearch.de | ||
| - **Security**: [GitHub Security Advisories](https://github.com/netresearch/phpbu-docker/security/advisories/new) |
There was a problem hiding this comment.
The link points specifically to the new advisory / report flow, but the label 'GitHub Security Advisories' can read like it points to the advisories list. Consider renaming the link text to something more explicit (e.g., 'Report a vulnerability' or 'Security advisory (report)') to better communicate the action contributors should take.
| - **Security**: [GitHub Security Advisories](https://github.com/netresearch/phpbu-docker/security/advisories/new) | |
| - **Security**: [Report a security vulnerability](https://github.com/netresearch/phpbu-docker/security/advisories/new) |
Summary
@netresearch.deemail addresses with GitHub-native referencessupportsection to package metadata with Issues/Source URLsMotivation
Generic email addresses in public repositories attract spam and create maintenance overhead. GitHub provides better mechanisms for each use case:
Test plan