-
-
Notifications
You must be signed in to change notification settings - Fork 263
Description
Is your feature request related to a problem? Please describe.
No problem identified, other than internal security review processes recommend providing the SECURITY.md file.
Describe the solution you'd like
It's always good to allow folks to be able to report potential security risks or vulnerabilities in the code. I have seen this done in many projects on Github and it would be a great addition. I found this for reference: https://docs.github.com/en/code-security/getting-started/adding-a-security-policy-to-your-repository
Describe alternatives you've considered
Reporting vulnerabilities as issues isn't always a good practice as it does not allow time for remediation of the vulnerabilities and could expose users to potential exploitation of said vulnerabilities.
Additional context
None