Opened 5 years ago

Closed 5 years ago

Last modified 5 years ago

#30793 closed Cleanup/optimization (invalid)

Add a SECURITY.md file.

Reported by: Grey Baker Owned by: nobody
Component: Documentation Version: dev
Severity: Normal Keywords:
Cc: Triage Stage: Unreviewed
Has patch: yes Needs documentation: no
Needs tests: no Patch needs improvement: no
Easy pickings: yes UI/UX: no

Description

GitHub will pick up SECURITY.md files and link to them from a tooltip when users are creating their first issue. You can see an example at https://github.com/nodejs/node/issues/new. (I work for GitHub, and can help make the experience better if there's anything you think needs improving.)

Adding such a file should therefore reduce the risk of accidental uncoordinated disclosure.

Change History (3)

comment:1 by Claude Paroz, 5 years ago

Isn't that just an issue template? I'm not a fan of adding files in the repository just for the Web UI tool.

comment:2 by Mariusz Felisiak, 5 years ago

Resolution: invalid
Status: newclosed
Summary: Add a SECURITY.md fileAdd a SECURITY.md file.

Thanks for this ticket, however we don't use GitHub's issues.

comment:3 by Grey Baker, 5 years ago

🤦‍♂️ How did I not see that!

Makes sense. It’s not a normal issue template - it’s a convention started by the Node team a year and a bit ago, but if you’re not using GitHub issues that makes sense!

Note: See TracTickets for help on using tickets.
Back to Top