From edf16e5e3fec731a97470e3c58c689e96b449f94 Mon Sep 17 00:00:00 2001 From: shreelakshmijoshi Date: Thu, 12 Sep 2024 17:13:28 +0530 Subject: [PATCH 1/2] Feature: Add SECURITY.md --- .github/ISSUE_TEMPLATE/bug-report.md | 1 + .github/workflows/update_wiki.yml | 2 ++ SECURITY.md | 25 +++++++++++++++++++++++++ 3 files changed, 28 insertions(+) create mode 100644 SECURITY.md diff --git a/.github/ISSUE_TEMPLATE/bug-report.md b/.github/ISSUE_TEMPLATE/bug-report.md index 3f6414b..bb2ea73 100644 --- a/.github/ISSUE_TEMPLATE/bug-report.md +++ b/.github/ISSUE_TEMPLATE/bug-report.md @@ -7,6 +7,7 @@ assignees: '' --- +* To report vulnerabilities please refer [SECURITY.md](https://github.com/datakaveri/dx-acl-apd/blob/main/SECURITY.md) ### Current Behavior: diff --git a/.github/workflows/update_wiki.yml b/.github/workflows/update_wiki.yml index bdbbd44..d37ebe7 100644 --- a/.github/workflows/update_wiki.yml +++ b/.github/workflows/update_wiki.yml @@ -36,6 +36,7 @@ jobs: cp -r LICENSE wiki/LICENSE.md | cp -r CODE_OF_CONDUCT.md wiki/ | cp -r CONTRIBUTING.md wiki/ | + cp -r SECURITY.md wiki/ | ls -la wiki/ - name: Copy and Modify README for Wiki @@ -69,6 +70,7 @@ jobs: mv wiki/LICENSE.md wiki/08-License.md mv wiki/CODE_OF_CONDUCT.md wiki/09-Code-of-conduct.md | sed -i -e 's/.\/docs\/cdpg.png/cdpg.png/ ' wiki/09-Code-of-conduct.md mv wiki/CONTRIBUTING.md wiki/10-Contributing.md | sed -i -e 's/.\/docs\/cdpg.png/cdpg.png/ ' wiki/10-Contributing.md + mv wiki/SECURITY.dm wiki/11-Security.md | sed -i -e 's/.\/docs\/cdpg.png/cdpg.png/ ' wiki/11-Security.md ls -la wiki # List files to verify renaming diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..57955cf --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,25 @@ +

+ +

+ +**Thanks for reporting the vulnerability issue**! :vulcan_salute: +
+If you find any potential vulnerabilities in Data Exchange servers, please report it to us in a confidential way +by adding the following content in the email: + +``` +From: +To: DX Admin , DX Support +Subject: Vulnerability report +Attachement: +Body: + Type of the issue: , + Affected files: , + Prerequisities: , + Steps: , + Impact of the issue: , + Anything else: + +``` + + From b3a6a9a70391b448b53ab8f48f9df89be4aab915 Mon Sep 17 00:00:00 2001 From: shreelakshmijoshi Date: Thu, 12 Sep 2024 17:20:41 +0530 Subject: [PATCH 2/2] Refactor: github actions --- .github/workflows/update_wiki.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/update_wiki.yml b/.github/workflows/update_wiki.yml index d37ebe7..f9bfb45 100644 --- a/.github/workflows/update_wiki.yml +++ b/.github/workflows/update_wiki.yml @@ -70,7 +70,7 @@ jobs: mv wiki/LICENSE.md wiki/08-License.md mv wiki/CODE_OF_CONDUCT.md wiki/09-Code-of-conduct.md | sed -i -e 's/.\/docs\/cdpg.png/cdpg.png/ ' wiki/09-Code-of-conduct.md mv wiki/CONTRIBUTING.md wiki/10-Contributing.md | sed -i -e 's/.\/docs\/cdpg.png/cdpg.png/ ' wiki/10-Contributing.md - mv wiki/SECURITY.dm wiki/11-Security.md | sed -i -e 's/.\/docs\/cdpg.png/cdpg.png/ ' wiki/11-Security.md + mv wiki/SECURITY.md wiki/11-Security.md | sed -i -e 's/.\/docs\/cdpg.png/cdpg.png/ ' wiki/11-Security.md ls -la wiki # List files to verify renaming