tournesol-app / tournesol

Free and open source code of the https://tournesol.app platform. Meet the community on Discord https://discord.gg/WvcSG55Bf3
https://tournesol.app
Other
331 stars 48 forks source link

[front] sec: add a well-known security policy #2000

Closed GresilleSiffle closed 3 months ago

GresilleSiffle commented 3 months ago

related issues #1987


Description

After each deployment, fast and not fast, the security policy will be updated if needed and available at https://tournesol.app/.well-known/security.txt (also available on the staging server).

This security policy is mentioned on GitHub in the standard SECURITY.md file: https://github.com/tournesol-app/tournesol/blob/1987-add_security_txt/.github/SECURITY.md

The ansible role is called "well_known/frontend" for now, but we may want to remove the "frontend" part to make the well known URI available at the main domain tournesol.app regardless of the underlying application. What do you think?

Checklist