51 lines
1.5 KiB
Markdown
51 lines
1.5 KiB
Markdown
# Security Policy
|
|
|
|
We use [Socket](https://socket.dev/), [Deepsource](https://deepsource.com/) and [gosec](https://github.com/securego/gosec) for this project.
|
|
|
|
## Strict Verfication of Contributors and Code Quality
|
|
|
|
We are strict about the quality of the code and the contributors. Please read the [CONTRIBUTING.md](CONTRIBUTING.md) file for more information.
|
|
|
|
## Cryptography Dependencies
|
|
|
|
- golang.org/x/crypto for core cryptographic primitives
|
|
- hkdf
|
|
- curve25519
|
|
|
|
- go/crypto
|
|
- ed25519
|
|
- sha256
|
|
- rand
|
|
- aes
|
|
- cipher
|
|
- hmac
|
|
|
|
## Reporting a Vulnerability
|
|
|
|
Please report any security vulnerabilities to [rns@quad4.io](mailto:rns@quad4.io)
|
|
|
|
**PGP Key:**
|
|
|
|
```
|
|
-----BEGIN PGP PUBLIC KEY BLOCK-----
|
|
|
|
xjMEZ3RaxBYJKwYBBAHaRw8BAQdAcW8OFXyQ6KuqoTWKVbULYgakD/CeW50y
|
|
W0KFou8WwJTNG3Juc0BxdWFkNC5pbyA8cm5zQHF1YWQ0LmlvPsLAEQQTFgoA
|
|
gwWCZ3RaxAMLCQcJkJm7qyNLc8pmRRQAAAAAABwAIHNhbHRAbm90YXRpb25z
|
|
Lm9wZW5wZ3Bqcy5vcmdVRY9jqwrIm+oRWRFnnBjKUcqvkG/kwkQZ3T74Xz3K
|
|
QQMVCggEFgACAQIZAQKbAwIeARYhBG62BFzXpfHCy0yV95m7qyNLc8pmAACS
|
|
oQD+K8oIaGx3tOlQbBV5AT3pHCaqXpRoL4W0V4JWc3VCi+MA/iiW6peitoae
|
|
+YhKE5lnkiU1jP47VuItQDNt+fNyqNAOzjgEZ3RaxBIKKwYBBAGXVQEFAQEH
|
|
QOBQyIb3gXV0Uih/V9Yx5JsFavxSenCtncNXx5KM6cB8AwEIB8K+BBgWCgBw
|
|
BYJndFrECZCZu6sjS3PKZkUUAAAAAAAcACBzYWx0QG5vdGF0aW9ucy5vcGVu
|
|
cGdwanMub3Jnpqm3qWGYB50CM/kuv+byGwQ3wxIGIpRlK8pwT4l+wXICmwwW
|
|
IQRutgRc16XxwstMlfeZu6sjS3PKZgAAzm0BAIKHfL9G+IzCX9B1gVGcG9an
|
|
j+gC4y9FrEsmFEBpvGeXAP93FfhO447jWijmxsImTtHTyvhpfeR3a7huFFyi
|
|
lh60DA==
|
|
=Nm9f
|
|
-----END PGP PUBLIC KEY BLOCK-----
|
|
```
|
|
|
|
## Gosec Command
|
|
|
|
`gosec ./cmd/* ./pkg/* ./internal/*` |