Skip to content

[INFOSEC-634] Add security policy - #393

Merged
pritam-gembali merged 1 commit into
masterfrom
add-security-policy
Oct 1, 2026
Merged

pritam-gembali merged 1 commit into
masterfrom
add-security-policy

Conversation

@bhargavirao24

@bhargavirao24 bhargavirao24 commented Sep 23, 2026 •

Copy link
Copy Markdown
Contributor

Description

Adds a SECURITY.md file so security researchers have clear instructions for privately reporting vulnerabilities in BitGoWASM.

The policy:

  • directs vulnerability reports to security@bitgo.com
  • explains what information to include in a report
  • provides guidance for securely sharing sensitive material
  • clarifies that Bugcrowd eligibility depends on the program scope
  • requests coordinated disclosure

Testing

Not applicable. This is a documentation-only change.

Tracking

INFOSEC-634: Publish SECURITY.md for public repositories

@bhargavirao24
bhargavirao24 requested a review from a team September 23, 2026 22:07
@linear-code

linear-code Bot commented Sep 23, 2026

Copy link
Copy Markdown

INFOSEC-634

@bhargavirao24
bhargavirao24 requested a review from a team as a code owner October 1, 2026 18:39
@pritam-gembali
pritam-gembali merged commit 4b5c8fd into master Oct 1, 2026
20 checks passed
@pritam-gembali
pritam-gembali deleted the add-security-policy branch October 1, 2026 18:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants