Merge branch 'Pycord-Development:master' into master

Author: Sengolda

CODE_OF_CONDUCT.md renamed to .github/CODE_OF_CONDUCT.md

@@ -34,6 +34,11 @@ If the bug report is missing this information then it'll take us longer to fix t
 
 Submitting a pull request is fairly simple, just make sure it focuses on a single aspect and doesn't manage to have scope creep and it's probably good to go. It would be incredibly lovely if the style is consistent to that found in the project. This project follows PEP-8 guidelines (mostly) with a column limit of 125.
 
+## Use of "type: ignore" comments
+In some cases, it might be necessary to ignore type checker warnings for one reason or another.
+If that is that case, it is **required** that a comment is left explaining why you are
+deciding to ignore type checking warnings.
+
 ### Licensing
 
 By submitting a pull request, you agree that; 1) You hold the copyright on all submitted code inside said pull request; 2) You agree to transfer all rights to the owner of this repository, and; 3) If you are found to be in fault with any of the above, we shall not be held responsible in any way after the pull request has been merged.

.github/CONTRIBUTING.md

@@ -0,0 +1,36 @@
+# Developer Certificate of Origin (DCO) 
+```
+Version 1.1
+
+Copyright (C) 2004, 2006 The Linux Foundation and its contributors.
+
+Everyone is permitted to copy and distribute verbatim copies of this
+license document, but changing it is not allowed.
+
+
+Developer's Certificate of Origin 1.1
+
+By making a contribution to this project, I certify that:
+
+(a) The contribution was created in whole or in part by me and I
+    have the right to submit it under the open source license
+    indicated in the file; or
+
+(b) The contribution is based upon previous work that, to the best
+    of my knowledge, is covered under an appropriate open source
+    license and I have the right under that license to submit that
+    work with modifications, whether created in whole or in part
+    by me, under the same open source license (unless I am
+    permitted to submit under a different license), as indicated
+    in the file; or
+
+(c) The contribution was provided directly to me by some other
+    person who certified (a), (b) or (c) and I have not modified
+    it.
+
+(d) I understand and agree that this project and the contribution
+    are public and that a record of the contribution (including all
+    personal information I submit with it, including my sign-off) is
+    maintained indefinitely and may be redistributed consistent with
+    this project or the open source license(s) involved.
+```

.github/DEVELOPER_CERTIFICATE_OF_ORIGIN.md

@@ -6,7 +6,7 @@ body:
     attributes:
       value: >
         Thanks for taking the time to fill out a bug.
-        If you want real-time support, consider joining our Discord at https://discord.gg/r3sSKJJ instead.
+        If you want real-time support, consider joining our Discord at https://pycord.dev/discord instead.
 
         Please note that this form is for bugs only!
   - type: input

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -5,4 +5,4 @@ contact_links:
     url: https://github.com/Pycord-Development/pycord/discussions
   - name: Discord Server
     about: Use our official Discord server to ask for help and questions as well.
-    url: https://discord.gg/UCXwPR7Pew
+    url: https://pycord.dev/discord

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1,57 @@
+name: Vulnerability Report
+description: Report vulnerabilities
+labels: unconfirmed vulnerability
+assignees: BobDotCom,Lulalaby,CodeWithSwastik
+body:
+  - type: markdown
+    attributes:
+      value: >
+        Thanks for taking the time to fill out a vulnerability report.
+        If you want real-time support, consider joining our Discord at https://pycord.dev/discord instead.
+
+        Please note that this form is for vulnerability reports only!
+  - type: textarea
+    attributes:
+      label: Summary
+      description: A simple summary of your vulnerability report
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: Reproduction Steps
+      description: >
+         What you did to make it happen.
+    validations:
+      required: true
+  - type: textarea
+    attributes:
+      label: Minimal Reproducible Code
+      description: >
+        A short snippet of code that showcases the vulnerability.
+      render: python
+  - type: textarea
+    attributes:
+      label: System Information
+      description: >
+        Run `python -m discord -v` and paste this information below.
+
+        This command required v1.1.0 or higher of the library. If this errors out then show some basic
+        information involving your system such as operating system and Python version.
+    validations:
+      required: true
+  - type: checkboxes
+    attributes:
+      label: Checklist
+      description: >
+        Let's make sure you've properly done due dilligence when reporting this issue!
+      options:
+        - label: I have searched the open issues for duplicates.
+          required: true
+        - label: I have shown the entire steps to reproduce the vulnerability.
+          required: true
+        - label: I have removed my token from display, if visible.
+          required: true
+  - type: textarea
+    attributes:
+      label: Additional Context
+      description: If there is anything else to say, please do so here.

.github/ISSUE_TEMPLATE/vulnerability_report.yml

@@ -8,7 +8,8 @@
 
 - [ ] If code changes were made then they have been tested.
     - [ ] I have updated the documentation to reflect the changes.
+- [ ] If `type: ignore` comments were used, a comment is also left explaining why
 - [ ] This PR fixes an issue.
 - [ ] This PR adds something new (e.g. new method or parameters).
 - [ ] This PR is a breaking change (e.g. methods or parameters removed/renamed)
-- [ ] This PR is **not** a code change (e.g. documentation, README, typehinting, ...)
+- [ ] This PR is **not** a code change (e.g. documentation, README, typehinting, examples, ...)

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,15 @@
+# Security Policy
+
+## Supported Versions
+
+| Version | Supported          |
+| ------- | ------------------ |
+| 2.0.0   | :white_check_mark: |
+| 1.7.x   | :white_check_mark: |
+| < 1.7.3 | :x:                |
+
+## Reporting a Vulnerability
+
+If you find a vulnerability you have two ways to report it:
+- Write us on https://pycord.dev/discord
+- Open an [issue](https://github.com/Pycord-Development/pycord/issues/new/choose)

.github/SECURITY.md

@@ -0,0 +1,10 @@
+name: bandit
+on: [pull_request, push]
+jobs:
+  bandit:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/setup-python@v2
+      - run: pip install bandit
+      - run: bandit --recursive  --skip B101,B104,B105,B110,B307,B311,B404,B603,B607 .

.github/workflows/bandit.yml

@@ -0,0 +1,12 @@
+name: mypy
+on: [pull_request, push]
+jobs:
+  mypy:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - uses: actions/setup-python@v2
+      - run: pip install mypy
+      - run: pip install -r requirements.txt
+      - run: mkdir --parents --verbose .mypy_cache
+      - run: mypy --ignore-missing-imports --install-types --non-interactive . || true