[GH-ISSUE #341] Guidance for a security type #6543

New Issue

GiteaMirror · 2026-05-15T03:01:28-05:00

GiteaMirror commented

2026-05-15 03:01:28 -05:00

Originally created by @feanil on GitHub (Feb 25, 2021).
Original GitHub issue: https://github.com/conventional-commits/conventionalcommits.org/issues/341

While adopting this spec one thing that stood out was the lack of a security type in the standard. Is there a best practice for this? Or would the committee be open to adding some guidance around how to manage security fixes?

Originally created by @feanil on GitHub (Feb 25, 2021). Original GitHub issue: https://github.com/conventional-commits/conventionalcommits.org/issues/341 While adopting this spec one thing that stood out was the lack of a `security` type in the standard. Is there a best practice for this? Or would the committee be open to adding some guidance around how to manage security fixes?

GiteaMirror closed this issue

2026-05-15 03:01:29 -05:00

GiteaMirror commented

2026-05-15 03:01:30 -05:00

@damianopetrungaro commented on GitHub (Mar 8, 2021):

@feanil the only "standard type" are feat or fix, you can add as many custom types as you want in your own project :)

@damianopetrungaro commented on GitHub (Mar 8, 2021): @feanil the only "standard type" are feat or fix, you can add as many custom types as you want in your own project :)

GiteaMirror commented

2026-05-15 03:01:31 -05:00

@damianopetrungaro commented on GitHub (Mar 8, 2021):

Gonna close it, if you still have questions or doubts please let me know!

@damianopetrungaro commented on GitHub (Mar 8, 2021): Gonna close it, if you still have questions or doubts please let me know!

GiteaMirror commented

2026-05-15 03:01:32 -05:00

@d-damien commented on GitHub (Jan 15, 2023):

I'm about to start using as I think it deserves its own type indeed, given the importance of security in CS. Seeing as other types are all short − perf, doc etc. − I'll take sec.

@d-damien commented on GitHub (Jan 15, 2023): I'm about to start using as I think it deserves its own type indeed, given the importance of security in CS. Seeing as other types are all short − perf, doc etc. − I'll take `sec`.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/conventionalcommits.org#6543