doc:Update SECURITY.md

This commit is contained in:
Tommaso Gagliardoni 2023-07-26 18:57:52 +02:00
parent ba15f9a4b6
commit 30f4b6f01f
2 changed files with 2 additions and 1 deletions

View file

@ -34,6 +34,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
- BREAKING CHANGE: slightly modified header field format, removing redundant MAC field and making it adherent to documentation.
- Action `init` now reads password from secure interface (not echoing characters, etc).
- Updated instructions in `SECURITY.md`.
## [0.3.1] - 2023-07-15

View file

@ -4,7 +4,7 @@ This file contains guidelines and policies for reporting and addressing security
## Reporting a Vulnerability
Please notice that Shufflecake is still experimental, so we are not actively tracking vulnerabilities at this stage. In the future we will add information to report suspected vulnerabilities.
Please notice that Shufflecake is still experimental, so we are not managing vulnerabilities in a confidential manner at this stage. In the future we will add information to confidentially report suspected vulnerabilities. For now, any vulnerability should be considered a bug and reported in the git issue tracker.
<!---
Please report (suspected) security vulnerabilities to **[securityATshufflecake.net](mailto:securityATshufflecake.net)**. In the future we will add a dedicated PGP key to allow you to encrypt communication to this address. GPG signing of your communication is welcome, but you can also report anonymously.