Set up vulnerability disclosure procedures

rtcharity / eahub.org

A global directory for effective altruists to connect

https://eahub.org

MIT License

18 stars 6 forks source link

Set up vulnerability disclosure procedures #664

Open taymonbeal opened 5 years ago

taymonbeal commented 5 years ago

I'd like us to get a HackerOne account, but that should wait until the organizational structure is nailed down. For now, a SECURITY.md will have to do.

taymonbeal commented 5 years ago

Also we should have a real disclosure policy but I guess I'll let that one wait too. We may need to run it by our lawyers or something.