-
Notifications
You must be signed in to change notification settings - Fork 120
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
docs: add SECURITY.md #2176
docs: add SECURITY.md #2176
Conversation
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #2176 +/- ##
==========================================
+ Coverage 49.48% 49.60% +0.12%
==========================================
Files 272 272
Lines 16151 16151
==========================================
+ Hits 7992 8012 +20
+ Misses 7547 7528 -19
+ Partials 612 611 -1 ☔ View full report in Codecov by Sentry. |
@@ -0,0 +1,75 @@ | |||
# Security Policy |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
extra leading space
- Axelar mainnet | ||
- Axelar Frontend Apps e.g satellite.money | ||
- Axelar Testnet | ||
- Axelar Testnet Frontend Apps e.g testnet.satellite.money |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Axelar powered Frontend apps
and combine mainnet/testnet frontend apps into one category. mention squid as well
|
||
### 1. Email | ||
|
||
Send your detailed vulnerability report to `[email protected]`. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
should this be switched to interoplabs domain? if not, let's forward emails to interoplabs for convenience.
|
||
| Severity | Description | | ||
|--------------|-------------------------------------------------------------------------| | ||
| **CRITICAL** | Immediate threat to critical systems (e.g., chain halts, funds at risk) | |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
remove chain halt. we might change severity for that
2. **Confirmation**: We will confirm receipt of your report within 48 hours. | ||
3. **Assessment**: Our security team will evaluate the vulnerability and inform you of its severity and the estimated time frame for resolution. | ||
4. **Resolution**: Once fixed, you will be contacted to verify the solution. | ||
5. **Public Disclosure**: Details of the vulnerability may be publicly disclosed after ensuring it poses no further risk. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
perhaps may be publicly disclosed at the approval of the team, to ensure it poses no further risk
Description
Todos
Steps to Test
Expected Behaviour
Other Notes