diff options
| author | Danilo M. <danix@danix.xyz> | 2026-11-09 10:29:32 +0100 |
|---|---|---|
| committer | Danilo M. <danix@danix.xyz> | 2026-11-09 10:29:32 +0100 |
| commit | 41038534f27f27861d279723beac4fa293ff39fb (patch) | |
| tree | 20b78b83fe3b7ead7f0c08382b4c96ca091cf7c6 /SECURITY.md | |
| parent | befd44b63a49705f4c5de76679a0b23841184540 (diff) | |
| download | HardenedPass-41038534f27f27861d279723beac4fa293ff39fb.tar.gz HardenedPass-41038534f27f27861d279723beac4fa293ff39fb.zip | |
docs: add a security policy and link it from About
SECURITY.md asks for private reports by email, encrypted to the
maintainer's OpenPGP key, and says where to fetch and check it. GitHub
shows it in the Security tab; About links to it.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Diffstat (limited to 'SECURITY.md')
| -rw-r--r-- | SECURITY.md | 23 |
1 files changed, 23 insertions, 0 deletions
diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000..d8c1f25c --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,23 @@ +# Security policy + +## Reporting a vulnerability + +Please report security issues privately, not on the public issue tracker. + +Email <danix@danix.xyz>, encrypted to the maintainer's OpenPGP key if you can: + + 110E 1B11 1BA2 C3C7 CCD1 27B8 F96B 36CA CC44 17AE + +Fetch it with either of these, and check that the fingerprint matches: + + gpg --locate-keys danix@danix.xyz + gpg --keyserver hkps://keys.openpgp.org --recv-keys 110E1B111BA2C3C7CCD127B8F96B36CACC4417AE + +Include the HardenedPass version (Settings, About), the Android version, and the +steps to reproduce. + +## Supported versions + +Only the latest release gets fixes. No app store delivers HardenedPass updates: +install the newest APK from +[GitHub Releases](https://github.com/danixland/HardenedPass/releases/latest). |