11 ms·
Very interesting. Quick note, your link to your securities policies under FAQ is returning a 404. > What security checks do you use internally? > We’ve adopt
by evolve2k 4y ago
Very interesting.
Quick note, your link to your securities policies under FAQ is returning a 404.
> What security checks do you use internally?
> We’ve adopted a security disclosures and response policy to make sure we can responsibly handle critical issues. We have an initial Security Response Committee, who for each vulnerability reported will coordinate to create the fix and release, and keep the committee looped in. The policy in full is here: https://github.com/sigstore/community/blob/main/SECURITY.md https://github.com/sigstore/community/blob/main/SECURITY.md
- dlor 4y agoThanks! We moved some code between repos and missed that link. Its fixed now!