Create SECURITY.md

add more relevant blurb than cisagov default
This commit is contained in:
Cameron Dixon 2023-05-29 07:39:03 -04:00 committed by GitHub
parent 0934e986fb
commit 7d2a44226a
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

3
.github/SECURITY.md vendored Normal file
View file

@ -0,0 +1,3 @@
If you've found a security or privacy issue on the .gov top-level domain infrastructure, email dotgov@cisa.dhs.gov.
If you see a security or privacy issue on a .gov domain, check [current-full.csv]([url](https://github.com/cisagov/dotgov-data/blob/main/current-full.csv)) or whois (same data) to see if the domain has a security contact. Most [federal (executive branch) agencies]([url](https://github.com/cisagov/vdp-in-fceb/)) also have a vulnerability disclosure policy. If you are unable to find a contact or receive no response from the security contact, you may email dotgov@cisa.dhs.gov.