gnolang / gno

Gno: An interpreted, stack-based Go virtual machine to build succinct and composable apps + gno.land: a blockchain for timeless code and fair open-source.
https://gno.land/
Other
896 stars 375 forks source link

Create a security issue template #3134

Open Kouteki opened 3 hours ago

Kouteki commented 3 hours ago

Current state

As a researcher/user who found a security issue, I have to choose between opening a public issue or looking for more private channels, risking to contact the wrong person in the process.

Desired state

As a researcher/user who found a security issue, I can click New issue and get instructions how to properly report it to the gno.land team.

Acceptance criteria

Kouteki commented 3 hours ago

I googled some best practices from github :)

https://docs.github.com/en/code-security/getting-started/adding-a-security-policy-to-your-repository