Skip to content

Add Security.md Security Policy for Reporting Vulnerabilities Appropriately #36

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
rakataprime opened this issue Mar 28, 2022 · 1 comment
Labels
documentation Improvements or additions to documentation good first issue Good for newcomers

Comments

@rakataprime
Copy link

rakataprime commented Mar 28, 2022

It is important to create a policy for reporting security vulnerabilities for smart contract and blockchain projects outside of github issues. This can often be a security.md or SECURITY.md file that is referenced in the readme.md

Example:
see https://github.com/CosmosContracts/juno/blob/main/SECURITY.md as an example from the cosmos ecosystem.

Full Disclosure:
I am a part of SecurityDAO https://secdao.xyz/ and our DAO does security audits and security consulting for cosmos projects and cosmwasm smart contracts

┆Issue is synchronized with this Jira Task by Unito

@aelesbao aelesbao added documentation Improvements or additions to documentation good first issue Good for newcomers labels Apr 7, 2022
@ef3n9r98
Copy link

ef3n9r98 commented Dec 2, 2022

Hey @aelesbao, is this issue still open? I know some devs who'd be interested in working on this. If you have a budget for it, I can put this issue up on OpenQ, and find someone interested.

Thanks!

aelesbao pushed a commit that referenced this issue Aug 29, 2023
Add 'contracts metadata' sub-command
@aelesbao aelesbao added this to the v2.0.0 milestone Sep 8, 2023
@aelesbao aelesbao self-assigned this Oct 5, 2023
@aelesbao aelesbao modified the milestones: v2.0, v2.1 Oct 21, 2023
@aelesbao aelesbao removed their assignment Nov 15, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
documentation Improvements or additions to documentation good first issue Good for newcomers
Projects
None yet
Development

No branches or pull requests

3 participants