From 41038534f27f27861d279723beac4fa293ff39fb Mon Sep 17 00:00:00 2001
From: "Danilo M." <danix@danix.xyz>
Date: Mon, 9 Nov 2026 10:29:32 +0100
Subject: docs: add a security policy and link it from About

SECURITY.md asks for private reports by email, encrypted to the
maintainer's OpenPGP key, and says where to fetch and check it. GitHub
shows it in the Security tab; About links to it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 app/src/main/java/app/passwordstore/ui/settings/AboutScreen.kt | 3 +++
 app/src/main/res/values-it/strings.xml                         | 1 +
 app/src/main/res/values/strings.xml                            | 1 +
 3 files changed, 5 insertions(+)

(limited to 'app/src/main')

diff --git a/app/src/main/java/app/passwordstore/ui/settings/AboutScreen.kt b/app/src/main/java/app/passwordstore/ui/settings/AboutScreen.kt
index 4a366390..6c20d3af 100644
--- a/app/src/main/java/app/passwordstore/ui/settings/AboutScreen.kt
+++ b/app/src/main/java/app/passwordstore/ui/settings/AboutScreen.kt
@@ -152,6 +152,9 @@ private fun AboutScreen(
     LinkRow(stringResource(R.string.about_changelog)) { onOpen(changelog) }
     LinkRow(stringResource(R.string.about_source)) { onOpen(REPOSITORY) }
     LinkRow(stringResource(R.string.about_issues)) { onOpen("$REPOSITORY/issues") }
+    LinkRow(stringResource(R.string.about_security)) {
+      onOpen("$REPOSITORY/blob/master/SECURITY.md")
+    }
     // White in both themes: the logo's dark outline disappears on a dark background, and Ko-fi
     // asks that the logo itself stays as it is.
     Button(
diff --git a/app/src/main/res/values-it/strings.xml b/app/src/main/res/values-it/strings.xml
index fed8adec..18065976 100644
--- a/app/src/main/res/values-it/strings.xml
+++ b/app/src/main/res/values-it/strings.xml
@@ -393,6 +393,7 @@
   <string name="about_changelog">Novità</string>
   <string name="about_source">Codice sorgente</string>
   <string name="about_issues">Segnala un problema</string>
+  <string name="about_security">Segnala un problema di sicurezza</string>
   <string name="about_support">Sostieni su Ko-fi</string>
   <string name="about_privacy_title">Privacy</string>
   <string name="about_privacy">Nessuna telemetria, nessuna analisi, nessun servizio Google. HardenedPass si collega solo al tuo server git, tramite il tuo proxy se ne imposti uno.</string>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index a415e95f..ec2396be 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -427,6 +427,7 @@
   <string name="about_changelog">What\'s new</string>
   <string name="about_source">Source code</string>
   <string name="about_issues">Report a problem</string>
+  <string name="about_security">Report a security issue</string>
   <string name="about_support">Support on Ko-fi</string>
   <string name="about_privacy_title">Privacy</string>
   <string name="about_privacy">No telemetry, no analytics, no Google services. HardenedPass connects only to your git server, through your proxy if you set one.</string>
-- 
cgit v1.2.3