From 46a6567e62c77e792419410bed394618df51cfe4 Mon Sep 17 00:00:00 2001 From: SwingTheVine Date: Fri, 6 Feb 2026 17:40:06 -0500 Subject: [PATCH] Updated meta-information to better comply with OpenSSF Best Practices --- docs/CONTRIBUTING.md | 2 ++ docs/CONTRIBUTING_LICENSE.txt | 34 ++++++++++++++++++++++++++++++++++ docs/README.md | 2 +- docs/SECURITY.md | 2 +- 4 files changed, 38 insertions(+), 2 deletions(-) create mode 100644 docs/CONTRIBUTING_LICENSE.txt diff --git a/docs/CONTRIBUTING.md b/docs/CONTRIBUTING.md index ea03672..26e765d 100644 --- a/docs/CONTRIBUTING.md +++ b/docs/CONTRIBUTING.md @@ -112,6 +112,7 @@

Guidelines

Our Mission

diff --git a/docs/CONTRIBUTING_LICENSE.txt b/docs/CONTRIBUTING_LICENSE.txt new file mode 100644 index 0000000..d950df0 --- /dev/null +++ b/docs/CONTRIBUTING_LICENSE.txt @@ -0,0 +1,34 @@ +Developer Certificate of Origin +Version 1.1 + +Copyright (C) 2004, 2006 The Linux Foundation and its contributors. + +Everyone is permitted to copy and distribute verbatim copies of this +license document, but changing it is not allowed. + + +Developer's Certificate of Origin 1.1 + +By making a contribution to this project, I certify that: + +(a) The contribution was created in whole or in part by me and I + have the right to submit it under the open source license + indicated in the file; or + +(b) The contribution is based upon previous work that, to the best + of my knowledge, is covered under an appropriate open source + license and I have the right under that license to submit that + work with modifications, whether created in whole or in part + by me, under the same open source license (unless I am + permitted to submit under a different license), as indicated + in the file; or + +(c) The contribution was provided directly to me by some other + person who certified (a), (b) or (c) and I have not modified + it. + +(d) I understand and agree that this project and the contribution + are public and that a record of the contribution (including all + personal information I submit with it, including my sign-off) is + maintained indefinitely and may be redistributed consistent with + this project or the open source license(s) involved. \ No newline at end of file diff --git a/docs/README.md b/docs/README.md index cbcffba..4ee784b 100644 --- a/docs/README.md +++ b/docs/README.md @@ -56,7 +56,7 @@ Total Comments Compression Repo Size -Views +Views Downloads Build Pages diff --git a/docs/SECURITY.md b/docs/SECURITY.md index e41f972..95c289e 100644 --- a/docs/SECURITY.md +++ b/docs/SECURITY.md @@ -1,5 +1,5 @@

Reporting A Security Vulnerability

CodeQL

- Since this is a userscript, there will not be many vulnerabilities. The user is in charge of their own security, by choosing which scripts to run. Regardless, if you do find a security vulnerability in Blue Marble, please report it on the GitHub Security Advisory "Report a Vulnerability" tab. + Since this is a userscript, there will not be many vulnerabilities. This userscript is expected to make an attempt to protect the user from attacks executed through the userscript (i.e. XSS attacks only possible if the userscript is run). However, the user is in charge of their own security by choosing which scripts to run. Regardless, if you do find a security vulnerability in Blue Marble, please report it on the GitHub Security Advisory "Report a Vulnerability" tab.