summaryrefslogtreecommitdiff
path: root/SECURITY.md
Commit message (Collapse)AuthorAgeFilesLines
* security docs: update capitalization of PSCRicardo Signes2021-04-161-1/+1
| | | | This is a nitpick, but I have picked it.
* Update secondary contact addresses for security reports.John Lightsey2021-04-161-2/+1
| | | | | The perl steering council should now be used as a secondary contact if the security team does not respond to a report.
* Document the security team's processes and practicesJohn Lightsey2020-09-101-5/+35
| | | | | | | | | | | Add a new perlsecpolicy POD file with detailed descriptions of the security team's vulnerability remediation workflow and the criteria used to distinguish security issues from other types of bugs. This also switches the team's public contact address to perl-security@perl.org, and updates the security contact information shown in github's issue interface.
* Add GitHub security templateNicolas R2019-10-201-0/+13
Add a SECURITY.md file, so GitHub will show a 'Report a security vulnerability' pointing to the Policy when trying to create one issue.