Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create SECURITY.md #171

Merged
merged 2 commits into from
May 28, 2022
Merged

Create SECURITY.md #171

merged 2 commits into from
May 28, 2022

Conversation

mfridman
Copy link
Member

Fixes #21.

My email is public, but I cannot volunteer any of your to disclose your email. I wish there was a better way to offer a security@ email, but I also don't want us to maintain anything.

Maybe one day there will be a GitHub native solution, but until then, this is the best I got.

@mfridman mfridman requested a review from oxisto February 25, 2022 01:19
@oxisto
Copy link
Collaborator

oxisto commented Feb 25, 2022

Can we create a google group mailing list or something, this is what I have seen in other projects.

@mfridman
Copy link
Member Author

Sounds good, I'll look into it. I mainly put up this PR as a starting point.

Copy link

@james-d-elliott james-d-elliott left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just noticed this in browsing, thought I'd highlight it so you don't accidentally miss it.

SECURITY.md Outdated Show resolved Hide resolved
Co-authored-by: James Elliott <[email protected]>
@oxisto
Copy link
Collaborator

oxisto commented May 28, 2022

@mfridman any update on the mailing list? Otherwise let's merge it for now with just the GitHub contacts.

@mfridman
Copy link
Member Author

Ye let's do that. Afaics the mailing list may be more work on us, and I'm also not entirely sure how to properly maintain it.

If someone wants to set up and manage a mailing list I'm all for it.

@mfridman mfridman merged commit cf43dec into main May 28, 2022
@mfridman mfridman deleted the mfridman-patch-1 branch May 28, 2022 16:40
oxisto pushed a commit to moneszarrugh/jwt that referenced this pull request Feb 21, 2023
oxisto pushed a commit to twocs/jwt that referenced this pull request Mar 29, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Security disclosure information
3 participants