Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add security.txt file #5359

Draft
wants to merge 5 commits into
base: master
Choose a base branch
from
+25 −0
Draft

Add security.txt file #5359

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
38e2a80
Add security.txt file
daniel-beck Aug 10, 2022
374a745
Add workaround for Awestruct ignoring . prefixed directories
daniel-beck Aug 10, 2022
d436a7a
Apply suggestions from code review
daniel-beck Dec 4, 2024
43fb6fb
Update Expires
daniel-beck Dec 4, 2024
7f3841d
Merge branch 'master' into security.txt
gounthar Dec 4, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 13 additions & 0 deletions content/.well-known/security.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
# The following web pages always contain current information about how to report issues:
Contact: https://www.jenkins.io/security/reporting/
Contact: https://www.jenkins.io/security/#reporting-vulnerabilities

# We also accept emails sent to this address:
Contact: mailto:jenkinsci-cert@googlegroups.com

# While team members speak other languages, this is the language common to all
Preferred-Languages: en

Expires: 2026-01-01T00:00:00.000Z
Canonical: https://www.jenkins.io/.well-known/security.txt
Policy: https://www.jenkins.io/security/reporting/
Copy link
Contributor

@Wadeck Wadeck Dec 4, 2024 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Policy: https://www.jenkins.io/security/reporting/
Policy: https://www.jenkins.io/security/reporting/
Policy: https://github.com/jenkinsci/docker/blob/master/SECURITY.md

adding the policy specific to CVEs reporting

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actual link is

Suggested change
Policy: https://www.jenkins.io/security/reporting/
Policy: https://www.jenkins.io/security/reporting/
Policy: https://github.com/jenkinsci/docker/security/policy

1 change: 1 addition & 0 deletions content/_ext/pipeline.rb
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,6 +38,7 @@
extension Awestruct::Extensions::DataDir.new

extension SolutionPage.new
extension WellKnown.new
extension Releases.new

extension UpgradeGuide.new
Expand Down
11 changes: 11 additions & 0 deletions content/_ext/well_known.rb
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
require 'awestruct/page'

# Workaround for . prefixed directories being ignored
class WellKnown
def execute(site)
# TODO Make more generic, iterate over all files in the directory
page = site.engine.load_page("#{site.dir}/.well-known/security.txt")
page.output_path = "/.well-known/security.txt"
site.pages << page
end
end
Loading