Skip to content

wasmtime: Favor github security advisories to emails - #1156

Merged
sb- merged 1 commit into
anthropics:mainfrom
alexcrichton:wasmtime-ghsa
Oct 27, 2026
Merged

sb- merged 1 commit into
anthropics:mainfrom
alexcrichton:wasmtime-ghsa

Conversation

@alexcrichton

Copy link
Copy Markdown
Contributor

This is our default for handling advisories anyway, so configure this to to through that channel rather than email.

This is our default for handling advisories anyway, so configure this to
to through that channel rather than email.
@github-actions

github-actions Bot commented Oct 27, 2026 •

Copy link
Copy Markdown

All contributors have signed the CLA ✍️ ✅
Posted by the CLA Assistant Lite bot.

@github-actions

Copy link
Copy Markdown

Enrolment triage: projects/wasmtime

Repository: bytecodealliance/wasmtime · opened by alexcrichton

Check Result
✅ Repository created 9 years ago, last push today
ℹ️ Stars / forks 18,777 stars · 1,897 forks · 164 watching
ℹ️ Outside participants 22 people from outside the project opened 35 of the last 100 issues and pull requests
ℹ️ Criticality score 0.83 on the OpenSSF scale of 0 to 1
signalscreated_since 131, updated_since 0, contributor_count 858, org_count 5, commit_frequency 37.1, recent_releases_count 80, closed_issues_count 800, updated_issues_count 896, comment_frequency 1.3, dependents_count 33,028
ℹ️ Package rank by downloads: nothing from this repository found in the top 15,000 on PyPI or the top 10,000 on npm or the top 1,000 on crates.io
✅ License Apache-2.0
✅ Opened by an active maintainer member of the owning organisation; 100+ commits in the last 12 months; #1 contributor
ℹ️ Contact in SECURITY.md SECURITY.md gives no email address to check wasmtime-security@bytecodealliance.org against
✅ OSS-Fuzz in OSS-Fuzz as wasmtime, with the same primary contact
✅ .oss-scanner/ in the repository present (Dockerfile, threat_model.md); Dockerfile at .oss-scanner/Dockerfile
✅ Pull request scope only this project's directory
✅ tools/validate.py passes
⚠️ Checklist the pull request template's checklist is missing from the description

Automated, from public data, to help reviewers. Enrolment is decided case by case against the criteria. If you think we got something wrong, please tell us in a reply.

@alexcrichton

Copy link
Copy Markdown
Contributor Author

I have read the CLA Document and I hereby sign the CLA

github-actions Bot added a commit that referenced this pull request Oct 27, 2026
@sb-
sb- merged commit 3145c17 into anthropics:main Oct 27, 2026
3 of 6 checks passed
@github-actions github-actions Bot locked and limited conversation to collaborators Oct 27, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants