bittensor

bittensor copied to clipboard

Is your feature request related to a problem? Please describe.

When I head to https://github.com/opentensor/bittensor/security , I see no Security policy was set, i.e. I do not know how the project maintainers would like the security bugs to be reported.

Describe the solution you'd like

It is pretty self-explanatory, create a SECURITY.md with a policy.

Examples of policies could be:

• one clearly saying all bugs can be reported to the issue tracker with some clear text in the title for example
• one asking users for "responsible disclosure" adding an email to which such security vulnerability report can be set. Such policies should also include a deadline, for example, 30 days, which is basically for how long bittensor team asks the original reporter to postpone public disclosure.
• one including bug bounty program - this actually incentives well-meaning users to use whatever procedure bittensor team prefers

Describe alternatives you've considered

No response

Additional context

No response