Skip to content

[INFOSEC-634] Add security policy - #269

Merged
gokulhost merged 1 commit into
masterfrom
add-security-policy
Oct 1, 2026
Merged

gokulhost merged 1 commit into
masterfrom
add-security-policy

Conversation

@bhargavirao24

Copy link
Copy Markdown
Contributor

Description

Adds a SECURITY.md file so security researchers have clear instructions for privately reporting vulnerabilities in advanced-wallets.

The policy:

  • directs vulnerability reports to security@bitgo.com
  • explains what information to include in a report
  • provides guidance for securely sharing sensitive material
  • clarifies that Bugcrowd eligibility depends on the program scope
  • requests coordinated disclosure

Testing

Not applicable. This is a documentation-only change.

Tracking

INFOSEC-634: Publish SECURITY.md for public repositories

@linear-code

linear-code Bot commented Sep 23, 2026

Copy link
Copy Markdown

INFOSEC-634

@Charan-Ratlan Charan-Ratlan left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@gokulhost
gokulhost disabled auto-merge October 1, 2026 17:38
@gokulhost
gokulhost merged commit 33b2e27 into master Oct 1, 2026
41 checks passed
@gokulhost
gokulhost deleted the add-security-policy branch October 1, 2026 17:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants