search

sourcegraph / jsonrpc2

Package jsonrpc2 provides a client and server implementation of JSON-RPC 2.0 (http://www.jsonrpc.org/specification)
MIT License
195 stars 62 forks source link

Docs: Create Security Policy #75

Closed diogoteles08 closed 1 year ago

diogoteles08 commented 1 year ago

Closes #74

I've created the SECURITY.md file following a GitHub's template and considering that you'd request that users report vulnerabilities through the security advisory, which is a handy new GitHub feature, but it's still in beta and has to be manually enabled by a maintainer.

If you're interested in this feature, you can activate it following this steps:

  1. Click on this link to go to Code security & analysis section on your repo's settings
  2. Click "Enable" for "Private vulnerability reporting (Beta)"

However, if you'd rather not use this feature, you can also request users to report vulnerabilities to an email. If that's the case, let me know which email you would like to receive the reports and I can submit the change.

Additionally, feel free to edit or suggest any changes to this document, it is supposed to reflect the amount of effort the team can offer to handle vulnerabilities.

willdollman commented 1 year ago

Hi @diogoteles08 thanks for this PR! After discussion we're planning to use our primary security email for security reports.