Skip to content

[INFOSEC-634] Add security policy - #1205

Merged
louib merged 2 commits into
masterfrom
add-security-policy
Oct 1, 2026
Merged

louib merged 2 commits into
masterfrom
add-security-policy

Conversation

@bhargavirao24

Copy link
Copy Markdown
Contributor

Description

Adds a SECURITY.md file so security researchers have clear instructions for privately reporting vulnerabilities in api-ts.

The policy:

  • directs vulnerability reports to security@bitgo.com
  • explains what information to include in a report
  • provides guidance for securely sharing sensitive material
  • clarifies that Bugcrowd eligibility depends on the program scope
  • requests coordinated disclosure

Testing

Not applicable. This is a documentation-only change.

Tracking

INFOSEC-634: Publish SECURITY.md for public repositories

@bhargavirao24
bhargavirao24 requested a review from a team as a code owner September 23, 2026 22:49
@linear-code

linear-code Bot commented Sep 23, 2026

Copy link
Copy Markdown

INFOSEC-634

@github-actions

github-actions Bot commented Oct 1, 2026

Copy link
Copy Markdown

This PR has been marked as stale because it has had no activity for 7 days. Remove the stale label or comment to keep it open. It will be closed automatically in 7 more days if no activity occurs.

@github-actions github-actions Bot added the stale label Oct 1, 2026

@vmccarty vmccarty left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thank you!

@louib
louib disabled auto-merge October 1, 2026 19:08
@louib
louib merged commit a91807f into master Oct 1, 2026
6 checks passed
@louib
louib deleted the add-security-policy branch October 1, 2026 19:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants