Bug 40527 - Add SECURITY.md to Koha
Summary: Add SECURITY.md to Koha
Status: Needs Signoff
Alias: None
Product: Koha
Classification: Unclassified
Component: Architecture, internals, and plumbing (show other bugs)
Version: Main
Hardware: All All
: P5 - low enhancement
Assignee: Bugs List
QA Contact: Testopia
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2025-07-28 04:11 UTC by David Cook
Modified: 2025-07-28 04:46 UTC (History)
0 users

See Also:
GIT URL:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:


Attachments
Bug 40527: Initial draft of SECURITY.md (3.61 KB, patch)
2025-07-28 04:46 UTC, David Cook
Details | Diff | Splinter Review

Note You need to log in before you can comment on or make changes to this bug.
Description David Cook 2025-07-28 04:11:56 UTC
We should consider adding a SECURITY.md document to the Koha git repository to give people insight into how to report security issues for Koha.

https://docs.github.com/en/code-security/getting-started/adding-a-security-policy-to-your-repository
Comment 1 David Cook 2025-07-28 04:46:20 UTC
Created attachment 184701 [details] [review]
Bug 40527: Initial draft of SECURITY.md

This patch includes an initial draft of a proposed SECURITY.md
guideline for reporting security bugs to Koha.