Cosmos security, compliance, and privacy policies
=================================================

Project Repositories and Subprojects
____________________________________

The following repositories constitute the codebases for the Astronomer Cosmos project for compliance purposes (OSPS-QA-04.01):

**This repository**

- `astronomer-cosmos <https://github.com/astronomer/astronomer-cosmos>`_ - The main Cosmos library (this repository)

**Additional repositories / subprojects**

- `cosmos-demo <https://github.com/astronomer/cosmos-demo>`_ - Example DAGs and demo project for Cosmos

Note: There are no additional subproject codebases beyond the repositories listed above for OSPS-QA-04.01 compliance purposes.

Versioning Policy
_________________

We follow `Semantic Versioning <https://semver.org/>`_ for releases.

Refer to `CHANGELOG.rst <https://github.com/astronomer/astronomer-cosmos/blob/main/CHANGELOG.rst>`_ for the latest changes.

Privacy Notice
______________

The application and this website collect telemetry to support the project's development. These can be disabled by the end-users.

Read the `Privacy Notice <https://github.com/astronomer/astronomer-cosmos/blob/main/PRIVACY_NOTICE.rst>`_ to learn more about it.

Security Policy
_______________

Check the project's `Security Policy <https://github.com/astronomer/astronomer-cosmos/blob/main/SECURITY.rst>`_ to learn
how to report security vulnerabilities in Astronomer Cosmos and how security issues reported to the Astronomer Cosmos
security team are handled.