diff --git a/SECURITY.md b/SECURITY.md index 5bfd5c1..b71ee8e 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -4,7 +4,12 @@ If you have discovered a security vulnerability, please refer to [our website](h ## Vulnerability Management -- We use [OSV](https://osv.dev/) to scan for package vulnerabilities in our dependencies. +- We use PNPM and [OSV](https://osv.dev/) to scan for package vulnerabilities in our dependencies. + +## SAST + +- Gosec for Go code. +- ESLint with eslint-plugin-security for JavaScript code. ## Dependency and Supply Chain