question about SECURITY.md #476

New Issue

Closed

opened 2023-02-18 14:07:09 +00:00 by flisk · 3 comments

flisk commented

2023-02-18 14:07:09 +00:00

Contributor

the current SECURITY.md is still referring to pleroma's security patch policy and hasn't been touched since the fork. maybe it'd be a good idea to drop it completely until akkoma has a clearly defined release schedule and/or security patch policy?

the current `SECURITY.md` is still referring to pleroma's security patch policy and hasn't been touched since the fork. maybe it'd be a good idea to drop it completely until akkoma has a clearly defined release schedule and/or security patch policy?

norm commented

2023-03-16 17:05:16 +00:00

Contributor

One idea for security bug reports/patches could be to have an email address to send those to, similar to what FoundKey does.

One idea for security bug reports/patches could be to have an email address to send those to, similar to what [FoundKey does](https://akkoma.dev/FoundKeyGang/FoundKey/src/branch/main/SECURITY.md).