Merge remote-tracking branch 'refs/remotes/origin/master'

Author: JonathanHuot

.github/workflows/run-tests.yml

@@ -39,6 +39,10 @@ jobs:
         python -m pip install coveralls coverage-lcov toml
     - name: Execute tests with tox
       env:
+        AUTH0_USERNAME: ${{ secrets.AUTH0_USERNAME }}
+        AUTH0_PASSWORD: ${{ secrets.AUTH0_PASSWORD }}
+        AUTH0_PKCE_CLIENT_ID: ${{ secrets.AUTH0_PKCE_CLIENT_ID }}
+        AUTH0_DOMAIN: ${{ secrets.AUTH0_DOMAIN }}
         TOXENV: ${{ matrix.tox-env }}
       run: |
         tox

SECURITY.md

@@ -0,0 +1,5 @@
+## Security contact information
+
+To report a security vulnerability, please use the
+[Tidelift security contact](https://tidelift.com/security).
+Tidelift will coordinate the fix and disclosure.