sungwy opened a new pull request, #3845: URL: https://github.com/apache/iceberg-python/pull/3845
# Rationale for this change Update `SECURITY-THREAT-MODEL.md` to introduce additional scope boundaries that define security issues in `iceberg-python`. This updated boundary excludes the following categories of issues from being labeled as a security issue in PyIceberg: - Reports requiring an authorized table writer or maintainer - Resource exhaustion, allocation amplification, and algorithmic complexity (categorized as a bug) - Out-of-bounds access and native memory-safety findings (categorized as a bug) - Configuration loaded from documented default locations (intended behavior) - Provenance of the table being read (defined as reader's responsibility) ## Are these changes tested? Markdown only change - no testing required. ## Are there any user-facing changes? No <!-- In the case of user-facing changes, please add the changelog label. --> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
