spire
spire copied to clipboard
Document security disclosure responsibilities in MAINTAINERS.md
SPIRE maintainers receive security disclosures, however the responsibility placed on them in the handling of these disclosures is not documented in MAINTAINERS.md.
Document maintainer responsibility as it relates to security response procedures, including confidentiality and response time requirements.
This seems straightforward to do but has been open a while; is the missing piece a discussion on what the complete list of procedures and requirements should be?
This issue is stale because it has been open for 365 days with no activity.
This issue was closed because it has been inactive for 30 days since being marked as stale.