Update SECURITY.md #959
Update SECURITY.md #959
Conversation
WhatisRT
left a comment
WhatisRT
left a comment
There was a problem hiding this comment.
This looks like a template with some things left for us to fill in.
I wonder if it even makes sense to have this template for this repository. We're not producing code that is used in production, our code only runs for testing purposes. What do other repositories that provide testing infrastructure do here?
|
feel free to utilize it as you wish, it just serves that if something was found in the code that could effect running in another project this is a way to report it and a bounty is possible |
The Security Council has approved a new SECURITY.md aligned with the bug-bounty process. Please update your project’s SECURITY.md with the correct links for your project and confirm that private vulnerability reporting is enabled for your repository. All bug bounty details found here: https://opensourcecommittee.docs.intersectmbo.org/about/paid-open-source-model-posm/bug-bounty-program'
aniketd
force-pushed
the
ThatGuyLLC-patch-1
branch
from
9af7fae to
a791fe1
Compare
aniketd
requested review from
Soupstraw,
WhatisRT,
carlostome,
lehins,
neilmayhew and
williamdemeo
| vulnerability, please mention them in your email but ***DO NOT*** attempt to include them as | ||
| attachments as this may cause your Email to be blocked by spam filters. | ||
| See the security file in the [Cardano engineering handbook](https://github.com/input-output-hk/cardano-engineering-handbook/blob/main/SECURITY.md). | ||
| If you discover a security vulnerability in formal-ledger-specifications, we encourage you to responsibly disclose it to us. To report a vulnerability, please use the [private reporting form on GitHub](https://github.com/IntersectMBO/formal-ledger-specifications/security/advisories/new) to draft a new _Security advisory_. |
There was a problem hiding this comment.
The link in this line is a 404.
There was a problem hiding this comment.
Looks like secure submission of security advisories is not enabled on this repo. @ThatGuyLLC could you please enable it.
The Security Council has approved a new SECURITY.md aligned with the bug-bounty process. Please update your project’s SECURITY.md with the correct links for your project and confirm that private vulnerability reporting is enabled for your repository. All bug bounty details found here:
https://opensourcecommittee.docs.intersectmbo.org/about/paid-open-source-model-posm/bug-bounty-program'
Description
Checklist
CHANGELOG.md