Skip to content

chore(security): fill the security-contact placeholders (owner-supplied values) #27

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
hyperpolymath merged 1 commit into from
Jul 28, 2026
Merged

chore(security): fill the security-contact placeholders (owner-supplied values) #27

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
34 changes: 8 additions & 26 deletions .github/SECURITY.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,24 +4,6 @@ Copyright (c) Jonathan D.A. Jewell <j.d.a.jewell@open.ac.uk>
-->
# Security Policy

<!--
============================================================================
TEMPLATE INSTRUCTIONS (delete this block before publishing)
============================================================================
Replace all {{PLACEHOLDER}} values with your information:
anytype - Your project name
hyperpolymath - GitHub username or org (e.g., hyperpolymath)
anytype - Repository name
{{SECURITY_EMAIL}} - Security contact email
{{PGP_FINGERPRINT}} - Your PGP key fingerprint (40 chars, no spaces)
{{PGP_KEY_URL}} - URL to your public PGP key
{{WEBSITE}} - Your website/domain
2026 - Current year for copyright

Optional: Remove sections that don't apply (e.g., PGP if you don't use it)
============================================================================
-->

We take security seriously. We appreciate your efforts to responsibly disclose vulnerabilities and will make every effort to acknowledge your contributions.

## Table of Contents
Expand Down Expand Up @@ -62,19 +44,19 @@ If you cannot use GitHub Security Advisories, you may email us directly:

| | |
|---|---|
| **Email** | {{SECURITY_EMAIL}} |
| **PGP Key** | [Download Public Key]({{PGP_KEY_URL}}) |
| **Fingerprint** | `{{PGP_FINGERPRINT}}` |
| **Email** | security@metadatastician.art |
| **PGP Key** | [Download Public Key](https://metadatastician.art/.well-known/pgp-key.txt) |
| **Fingerprint** | `ABF3ECD932C2A04345EC9B3D2E725C6B831EA2B8` |

```bash
# Import our PGP key
curl -sSL {{PGP_KEY_URL}} | gpg --import
curl -sSL https://metadatastician.art/.well-known/pgp-key.txt | gpg --import

# Verify fingerprint
gpg --fingerprint {{SECURITY_EMAIL}}
gpg --fingerprint ABF3ECD932C2A04345EC9B3D2E725C6B831EA2B8

# Encrypt your report
gpg --armor --encrypt --recipient {{SECURITY_EMAIL}} report.txt
gpg --armor --encrypt --recipient ABF3ECD932C2A04345EC9B3D2E725C6B831EA2B8 report.txt
```

> **⚠️ Important:** Do not report security vulnerabilities through public GitHub issues, pull requests, discussions, or social media.
Expand Down Expand Up @@ -374,7 +356,7 @@ When using anytype, we recommend:

## Additional Resources

- [Our PGP Public Key]({{PGP_KEY_URL}})
- [Our PGP Public Key](https://metadatastician.art/.well-known/pgp-key.txt)
- [Security Advisories](https://github.com/hyperpolymath/anytype/security/advisories)
- [Changelog](CHANGELOG.md)
- [Contributing Guidelines](CONTRIBUTING.md)
Expand All @@ -387,7 +369,7 @@ When using anytype, we recommend:

| Purpose | Contact |
|---------|---------|
| **Security issues** | [Report via GitHub](https://github.com/hyperpolymath/anytype/security/advisories/new) or {{SECURITY_EMAIL}} |
| **Security issues** | [Report via GitHub](https://github.com/hyperpolymath/anytype/security/advisories/new) or security@metadatastician.art |
| **General questions** | [GitHub Discussions](https://github.com/hyperpolymath/anytype/discussions) |
| **Other enquiries** | See [README](README.md) for contact information |

Expand Down
5 changes: 2 additions & 3 deletions .well-known/security.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,10 +2,9 @@
# RFC 9116 - security.txt
# https://securitytxt.org/

Contact: mailto:{{SECURITY_EMAIL}}
Contact: mailto:security@metadatastician.art
Expires: 2026-12-31T23:59:59.000Z
Encryption: {{PGP_KEY_URL}}
Encryption: https://metadatastician.art/.well-known/pgp-key.txt
Preferred-Languages: en
Canonical: https://github.com/hyperpolymath/anytype/.well-known/security.txt
Policy: https://github.com/hyperpolymath/anytype/blob/main/SECURITY.md
Hiring: https://{{WEBSITE}}/careers
Loading