Skip to content

Commit 87ecfb9

Browse files
authored
chore: add Security Reporting Instructions (#1370)
1 parent 65d0573 commit 87ecfb9

File tree

2 files changed

+46
-0
lines changed

2 files changed

+46
-0
lines changed

.github/SECURITY.md

Lines changed: 36 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
# Security Policy
2+
3+
## Reporting a Vulnerability
4+
5+
We take the security of our project seriously. If you discover a vulnerability, we encourage you to report it responsibly so we can address it promptly.
6+
7+
### How to Report
8+
9+
1. Navigate to the **Security** tab of this repository.
10+
2. Click on **"Report a Vulnerability"** to open the GitHub Security Advisories form.
11+
3. Fill out the form with as much detail as possible, including:
12+
- A clear description of the issue.
13+
- Steps to reproduce the vulnerability.
14+
- The affected versions or components.
15+
- Any potential impact or severity details.
16+
17+
Alternatively, you can send an email to **[security@lambdaclass.com](mailto:security@lambdaclass.com)** with the same details.
18+
19+
### Guidelines for Reporting
20+
21+
- **Do not publicly disclose vulnerabilities** until we have confirmed and fixed the issue.
22+
- Include any proof-of-concept code, if possible, to help us verify the vulnerability more efficiently.
23+
- If applicable, specify if the vulnerability is already being exploited.
24+
25+
### Our Response Process
26+
27+
- We commit to handling reports with diligence.
28+
- We will investigate all reported vulnerabilities thoroughly and transparently.
29+
- Once the vulnerability has been fixed, we will disclose the details publicly to ensure awareness and understanding.
30+
31+
32+
### Reward Program
33+
34+
While we do not currently offer a formal bug bounty program, we value your contribution and will recognize your efforts in our changelog or release notes (if you consent).
35+
36+
Thank you for helping us improve the security of our project!

README.md

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,16 @@
33
[![CI](https://github.com/lambdaclass/lambda_ethereum_consensus/actions/workflows/ci.yml/badge.svg)](https://github.com/lambdaclass/lambda_ethereum_consensus/actions/workflows/ci.yml)
44
[![Telegram chat](https://img.shields.io/endpoint?url=https%3A%2F%2Ftg.sumanjay.workers.dev%2Flambdaconsensus%2F&logo=telegram&label=chat&color=neon)](https://t.me/lambdaconsensus)
55

6+
## Security
7+
8+
We take security seriously. If you discover a vulnerability in this project, please report it responsibly.
9+
10+
- You can report vulnerabilities directly via the **[GitHub "Report a Vulnerability" feature](../../security/advisories/new)**.
11+
- Alternatively, send an email to **[security@lambdaclass.com](mailto:security@lambdaclass.com)**.
12+
13+
For more details, please refer to our [Security Policy](./.github/SECURITY.md).
14+
15+
616
## Prerequisites
717

818
### Direct Installation

0 commit comments

Comments
 (0)