Bug 40527

Summary: Add SECURITY.md to Koha
Product: Koha Reporter: David Cook <dcook>
Component: Architecture, internals, and plumbingAssignee: Bugs List <koha-bugs>
Status: Needs Signoff --- QA Contact: Testopia <testopia>
Severity: enhancement    
Priority: P5 - low    
Version: Main   
Hardware: All   
OS: All   
GIT URL: Change sponsored?: ---
Patch complexity: --- Documentation contact:
Documentation submission: Text to go in the release notes:
Version(s) released in:
Circulation function:
Attachments: Bug 40527: Initial draft of SECURITY.md

Description David Cook 2025-07-28 04:11:56 UTC
We should consider adding a SECURITY.md document to the Koha git repository to give people insight into how to report security issues for Koha.

https://docs.github.com/en/code-security/getting-started/adding-a-security-policy-to-your-repository
Comment 1 David Cook 2025-07-28 04:46:20 UTC
Created attachment 184701 [details] [review]
Bug 40527: Initial draft of SECURITY.md

This patch includes an initial draft of a proposed SECURITY.md
guideline for reporting security bugs to Koha.