Skip to content

Add SECURITY.md file for improving security review process #850

@dr4ugr

Description

@dr4ugr

Is your feature request related to a problem? Please describe.
No problem identified, other than internal security review processes recommend providing the SECURITY.md file.

Describe the solution you'd like
It's always good to allow folks to be able to report potential security risks or vulnerabilities in the code. I have seen this done in many projects on Github and it would be a great addition. I found this for reference: https://docs.github.com/en/code-security/getting-started/adding-a-security-policy-to-your-repository

Describe alternatives you've considered
Reporting vulnerabilities as issues isn't always a good practice as it does not allow time for remediation of the vulnerabilities and could expose users to potential exploitation of said vulnerabilities.

Additional context
None

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions