Added SECURITY.md, edited workflow

Author: mseeger

.github/workflows/lint.yml

@@ -8,7 +8,7 @@ on:
 
 jobs:
   build:
-    runs-on: 
+    runs-on:
       labels: ubuntu-latest
     steps:
     - uses: actions/checkout@v4
@@ -32,5 +32,5 @@ jobs:
         echo "Running black: https://github.com/psf/black"
         echo "Black should pass before commit! If this fails, run the command on the next line to fix the errors, then commit the changes"
         echo "git ls-files | grep "\.py$" |  xargs black"
-        echo "Run 'pip install .' if you do not have Black installed locally."
-        git ls-files | grep "\.py$" |  xargs black --check
+        echo "Run 'pip install -e .' if you do not have Black installed locally."
+        git ls-files | grep "\.py$" | xargs black --check

.github/workflows/python-publish.yml

@@ -31,7 +31,9 @@ jobs:
       run: python -c "import sys; print(sys.version)"
     - name: Install dependencies
       run: |
-        python -m pip install . --upgrade pip
+        python - m pip install --upgrade pip
+        python -m pip install 'litgpt[all,test,extra]'
+        python -m pip install .
     - name: Test with pytest
       run: |
         pytest -vvv --cov=./ --cov-report=xml

.github/workflows/release-drafter.yml

@@ -0,0 +1,12 @@
+# Reporting Security Issues
+
+Amazon Web Services (AWS) is dedicated to the responsible disclosure of security vulnerabilities.
+
+We kindly ask that you do not open a public GitHub issue to report security concerns.
+
+Instead, please submit the issue to the AWS Vulnerability Disclosure Program via [HackerOne](https://hackerone.com/aws_vdp?type=team) or send your report via email:
+`aws-security@amazon.com`.
+
+For more details, visit the [AWS Vulnerability Reporting Page](https://aws.amazon.com/security/vulnerability-reporting/).
+
+Thank you in advance for collaborating with us to help protect our customers.

.github/workflows/unit-tests.yml

@@ -1,7 +1,7 @@
 #!/bin/sh
 # runs black only on all python files committed in git
 echo "Running black."
-git ls-files | grep "\.py$" |  xargs black
+git ls-files | grep "\.py$" | xargs black
 
 if [ $? -ne 0 ]; then
  echo "Black should pass before commit!"

.github/workflows/update-changelog.yml

@@ -23,6 +23,8 @@ scripts.keys_values = "keys_values.__main__:main"
 dependencies = [
     "torchao",
     "filelock",
+    "black",
+    "flake8",
 ]
 
 [tool.setuptools.packages.find]