mirror of
https://github.com/astral-sh/ruff.git
synced 2026-10-28 10:45:37 +08:00
Zsolt Dollenstein
fbfc000904
## Summary The repository threat model in #28395 covers CI and release automation. Ruff and ty also need security guidance for their command-line tools, libraries, language servers, and browser playgrounds. Add three models that define trusted inputs, security invariants, and severity for these components, including the public playground sharing API. An index linked from `AGENTS.md` points reviewers to the applicable models. Depends on #28395. ## Test Plan Reviewed the trust assumptions and execution paths against the CLI, language-server, and playground code.
693 B
693 B
Security threat models
Use each model that covers the behavior under review.
- Ruff and ty CLI: command-line tools, native libraries, analysis, configuration, file operations, subprocesses, and diagnostics.
- Language servers: editor messages, workspace trust, document access, edits, and logs.
- Playgrounds: browser applications, WASM, Python execution, and the HTTP sharing API.
- GitHub repository: CI, releases, publishing, ecosystem jobs, and maintainer automation.
Development tools that build or run third-party code follow the repository model.