Skip to content

Initial draft of Python 'Security Policy'#1804

Merged
hugovk merged 13 commits into
python:mainfrom
sethmlarson:security-policy
May 27, 2026
Merged

Initial draft of Python 'Security Policy'#1804
hugovk merged 13 commits into
python:mainfrom
sethmlarson:security-policy

Conversation

@sethmlarson
Copy link
Copy Markdown
Contributor

@sethmlarson sethmlarson commented May 19, 2026

Part of #1803, this is an initial draft of the Python security policy and "limited" threat model that will be expanded and include more details for specific standard library modules and features. The security policy:

  • Prioritizes PSRT members well-being over technical merit of reports.
  • Documents how the Code of Conduct applies to vulnerability reporting communications.
  • Creates a small threat model for the Python interpreter for common reports which are not vulnerabilities. Future threat models will be added to a separate document and linked to.

cc @python/psrt

Loading
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@StanFromIreland StanFromIreland StanFromIreland approved these changes

@gpshead gpshead gpshead approved these changes

@encukou encukou encukou approved these changes

@hugovk hugovk hugovk approved these changes

@willingc willingc willingc approved these changes

@savannahostrowski savannahostrowski savannahostrowski approved these changes

@picnixz picnixz picnixz approved these changes

@JelleZijlstra JelleZijlstra Awaiting requested review from JelleZijlstra

@zooba zooba Awaiting requested review from zooba

@emmatyping emmatyping Awaiting requested review from emmatyping

+2 more reviewers

@woodruffw woodruffw woodruffw left review comments

@di di di approved these changes

Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.