[elgamal-registry] Add security txt for elgamal-registry and add SECURITY.md #337
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
joncinque
reviewed
Mar 28, 2025
| If you haven't done so already, please **enable two-factor auth** in your GitHub account. | ||
|
|
||
| Expect a response as fast as possible in the advisory, typically within 72 hours. | ||
|
|
There was a problem hiding this comment.
Since token-2022 should definitely be eligible for bug bounties, let's add the part about bounties:
## Security Bug Bounties
The Solana Foundation offer bounties for critical security issues. Please
see the [Agave Security Bug
Bounties](https://github.com/anza-xyz/agave/security/policy#security-bug-bounties)
for details on classes of bugs and payment amounts.
## Scope
Only the `spl-token-2022` program is included in the bounty scope, at [program](https://github.com/solana-program/token-2022/tree/master/program).
If you discover a critical security issue in an out-of-scope component, your finding
may still be valuable.
|
Oh shoot, sorry I just copied and pasted from record and forgot to update it for token 🙏 ... |
Co-authored-by: Jon C <me@jonc.dev>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Problem
There is no security-txt in the elgamal registry program yet.
Summary of Changes
This is analogous to solana-program/record#52. I added security-txt and also SECURITY.md for the repo.