docs/security.md: init info on security issues

Signed-off-by: Maciej Pijanowski <[email protected]>
Dasharo · Oct 2, 2024 · 5ab651d · 5ab651d
1 parent b5b0447
commit 5ab651d
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 0 deletions.
diff --git a/docs/security.md b/docs/security.md
@@ -0,0 +1,15 @@
+# Dasharo Security
+
+## Reporting security issues in Dasharo
+
+!!! note "Please note"
+
+    Dasharo security email address is intended for responsible disclosure by
+    security researchers and others who discover legitimate security
+    vulnerabilities. Please do not attempt to contact us via this address unless
+    you can demonstrate an actual security vulnerability or provide us with
+    reasonable steps we could follow to verify your claims.
+
+If you’ve discovered a security issue affecting Dasharo, please send an
+encrypted (using [Dasharo security team PGP key](TBD)) e-mail to this address:
+`[email protected]`.
diff --git a/mkdocs.yml b/mkdocs.yml
@@ -168,6 +168,7 @@ nav:
   - 'Intro':
       - 'About Dasharo': index.md
       - 'New? Start here': newcomers.md
+      - 'Security': security.md
   - 'Supported hardware':
       - 'Overview': variants/overview.md
       - 'Version matrix': variants/versions.md