Add security policy (#1388)

This commit is contained in:
larabr 2021-07-23 14:06:34 +02:00 committed by GitHub
parent d9829fce06
commit da60fa0047
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

7
SECURITY.md Normal file
View File

@ -0,0 +1,7 @@
## Reporting Security Issues
**Please do not report security vulnerabilities through public GitHub issues.**
If you believe you have found a security vulnerability in OpenPGP.js, please report it via email to [security@openpgpjs.org](mailto:security@openpgpjs.org). If possible, encrypt your message with our PGP key: it can be downloaded automatically using [WKD](https://wiki.gnupg.org/WKD), or manually on [openpgpjs.org](https://openpgpjs.org/.well-known/openpgpkey/hu/t5s8ztdbon8yzntexy6oz5y48etqsnbb?l=security).
You should receive a response within 2 working days.