diff --git a/SECURITY.md b/SECURITY.md index 5847ed44..3e96a359 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -18,4 +18,4 @@ The used version scheme is `YYYY.N.P` consisting of the year of the major releas **Do not report security vulnerabilities using GitHub issues!** -If you found a security vulnerability, please contact `security@turnierplan.net`. +If you found a security vulnerability, please report via the problem via GitHub [security advisories](https://github.com/turnierplan-NET/turnierplan.NET/security/advisories/new) or contact the following email address: [security@turnierplan.net](mailto:security@turnierplan.net). diff --git a/src/Turnierplan.App/wwwroot/.well-known/security.txt b/src/Turnierplan.App/wwwroot/.well-known/security.txt new file mode 100644 index 00000000..ac6bd54b --- /dev/null +++ b/src/Turnierplan.App/wwwroot/.well-known/security.txt @@ -0,0 +1,10 @@ +# This site is running turnierplan.NET +# ==================================== +# turnierplan.NET is an open-source tournament hosting software. +# Security problems related to this software shall be reported to the maintainers of the open-source repository: +Policy: https://github.com/turnierplan-NET/turnierplan.NET/security/policy +Contact: https://github.com/turnierplan-NET/turnierplan.NET/security/advisories/new +Contact: mailto:security@turnierplan.net +Preferred-Languages: de, en +# Security problems related to this installation of the software shall be reported to the corresponding administrators instead. +Expires: 2027-08-31T23:59:00Z