[PR #878] [MERGED] chore: create security.txt #1226

Closed
opened 2026-02-26 19:32:22 +03:00 by kerem · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/documenso/documenso/pull/878
Author: @daallgeier
Created: 1/28/2024
Status: Merged
Merged: 2/16/2024
Merged by: @Mythie

Base: mainHead: chore-security-text


📝 Commits (9)

  • 927a656 Create security.txt
  • 375df71 Merge branch 'main' into chore-security-text
  • 747a7b0 chore: security contacts and descr
  • 1f142e3 Merge branch 'main' into chore-security-text
  • 9c4ec34 fix: add precommit step for .well-known
  • 8ac2209 Merge branch 'main' into chore-security-text
  • abab0c0 chore: grammer and format
  • a76504c Merge branch 'main' into chore-security-text
  • 3e12a05 chore: more grammar

📊 Changes

8 files changed (+54 additions, -56593 deletions)

View changed files

📝 .husky/pre-commit (+12 -0)
.well-known/security.txt (+7 -0)
apps/marketing/public/.well-known/security.txt (+7 -0)
📝 apps/marketing/public/pdf.worker.min.js (+1 -56590)
apps/web/public/.well-known/security.txt (+7 -0)
📝 lint-staged.config.cjs (+3 -3)
📝 scripts/copy-pdfjs.cjs (+1 -0)
scripts/copy-wellknown.cjs (+16 -0)

📄 Description

Adding a security.txt file enables security researchers to quickly and easily see where they can submit security issues and know that they are being taken serious. From the proposal website:

"When security risks in web services are discovered by independent security researchers who understand the severity of the risk, they often lack the channels to disclose them properly. As a result, security issues may be left unreported. security.txt defines a standard to help organizations define the process for security researchers to disclose security vulnerabilities securely.”

See also https://securitytxt.org


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/documenso/documenso/pull/878 **Author:** [@daallgeier](https://github.com/daallgeier) **Created:** 1/28/2024 **Status:** ✅ Merged **Merged:** 2/16/2024 **Merged by:** [@Mythie](https://github.com/Mythie) **Base:** `main` ← **Head:** `chore-security-text` --- ### 📝 Commits (9) - [`927a656`](https://github.com/documenso/documenso/commit/927a656c576228ab4ef54dbc5a22237a4a9c116b) Create security.txt - [`375df71`](https://github.com/documenso/documenso/commit/375df71f5cae960d6c149a8735e44372fe95f305) Merge branch 'main' into chore-security-text - [`747a7b0`](https://github.com/documenso/documenso/commit/747a7b0aea078d4cf52db95abda58b51e269b7f8) chore: security contacts and descr - [`1f142e3`](https://github.com/documenso/documenso/commit/1f142e334a1026d8e1361d06790650f6b8f6de3b) Merge branch 'main' into chore-security-text - [`9c4ec34`](https://github.com/documenso/documenso/commit/9c4ec34a3c8a9fb6a190752538420809a1f60d37) fix: add precommit step for .well-known - [`8ac2209`](https://github.com/documenso/documenso/commit/8ac22094932a49bb270d2960ed075317301f2908) Merge branch 'main' into chore-security-text - [`abab0c0`](https://github.com/documenso/documenso/commit/abab0c0a22a586e22c0f50007f300ceb4e9c519d) chore: grammer and format - [`a76504c`](https://github.com/documenso/documenso/commit/a76504c0a49d8d387f1f2675f67255c2d4e1ed97) Merge branch 'main' into chore-security-text - [`3e12a05`](https://github.com/documenso/documenso/commit/3e12a05ab8fa665bb53f9ba71c9e9b06c59817e6) chore: more grammar ### 📊 Changes **8 files changed** (+54 additions, -56593 deletions) <details> <summary>View changed files</summary> 📝 `.husky/pre-commit` (+12 -0) ➕ `.well-known/security.txt` (+7 -0) ➕ `apps/marketing/public/.well-known/security.txt` (+7 -0) 📝 `apps/marketing/public/pdf.worker.min.js` (+1 -56590) ➕ `apps/web/public/.well-known/security.txt` (+7 -0) 📝 `lint-staged.config.cjs` (+3 -3) 📝 `scripts/copy-pdfjs.cjs` (+1 -0) ➕ `scripts/copy-wellknown.cjs` (+16 -0) </details> ### 📄 Description Adding a security.txt file enables security researchers to quickly and easily see where they can submit security issues and know that they are being taken serious. From the proposal website: > "When security risks in web services are discovered by independent security researchers who understand the severity of the risk, they often lack the channels to disclose them properly. As a result, security issues may be left unreported. security.txt defines a standard to help organizations define the process for security researchers to disclose security vulnerabilities securely.” See also https://securitytxt.org --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
kerem 2026-02-26 19:32:22 +03:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/documenso#1226
No description provided.