From 2ee8327d54d84605ed5462a2e50ac61a3022890f Mon Sep 17 00:00:00 2001 From: sepehr-safari Date: Thu, 24 Sep 2026 13:21:38 +0300 Subject: [PATCH] feat: a security contact at /.well-known/security.txt Points reporters at private vulnerability reporting on each of the four repositories, with the library's SECURITY.md as the policy. Expires in a year, as RFC 9116 asks. --- public/.well-known/security.txt | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 public/.well-known/security.txt diff --git a/public/.well-known/security.txt b/public/.well-known/security.txt new file mode 100644 index 0000000..03a1ec6 --- /dev/null +++ b/public/.well-known/security.txt @@ -0,0 +1,8 @@ +# Report a vulnerability privately through GitHub, on the repository it affects. +Contact: https://github.com/zig-nostr/nostr/security/advisories/new +Contact: https://github.com/zig-nostr/plaza/security/advisories/new +Contact: https://github.com/zig-nostr/notary/security/advisories/new +Contact: https://github.com/zig-nostr/deed/security/advisories/new +Policy: https://github.com/zig-nostr/nostr/blob/main/SECURITY.md +Preferred-Languages: en +Expires: 2027-09-23T00:00:00.000Z