diff --git a/.github/pgp-key.asc b/.github/pgp-key.asc new file mode 100644 index 0000000..6422353 --- /dev/null +++ b/.github/pgp-key.asc @@ -0,0 +1,15 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- +Comment: 3591 093D FD82 D3C6 DC54 8ED4 1B36 9431 C0BE 4BF0 +Comment: Martin Devolder + +xjMEad5ujRYJKwYBBAHaRw8BAQdAU/a8FO8LMv5WGVczDfgFaOEaAEqlks0jSL/E +9MAz48/NLE1hcnRpbiBEZXZvbGRlciA8bWFydGluLmRldm9sZGVyMkBnbWFpbC5j +b20+wokEExYIABoECwkIBwIVCAIWAQIZAQWCad5ujQKeAQKbAwAhCRAbNpQxwL5L +8BYhBDWRCT39gtPG3FSO1Bs2lDHAvkvwLVYA/3fwn82qWkCe4pbJXFcJ/H6vR7FX +kvSzPwAihS7UUvx8AP9PF9/qaM6wffdDZFvvpYZlFzzqqPT5H+uQHGdolZ8sAs44 +BGnebo0SCisGAQQBl1UBBQEBB0BwA78gy1i2gGyXESJGo2+jYS/sx9Qy7miMbXCy +FoYbOQMBCAfCeAQYFggACQWCad5ujQKbDAAhCRAbNpQxwL5L8BYhBDWRCT39gtPG +3FSO1Bs2lDHAvkvwB8IA/2w+rQpfxbMUixXk/3vGJYcJNl26Ju1Qyr5NAzJrv9G+ +AQCnMujTP3b1hGWIoU/C78TM7xgES4rVuv/TlFMtn2EuDw== +=CLKq +-----END PGP PUBLIC KEY BLOCK----- diff --git a/SECURITY.md b/SECURITY.md index cb696a2..f28fe14 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -10,3 +10,9 @@ Only the latest stable release receives security fixes. There is only one suppor Use GitHub's private vulnerability reporting feature instead: [Report a vulnerability](https://github.com/jxmorris12/language_tool_python/security/advisories/new). + +Alternatively, you can email security issues to the maintainers at [martin.devolder2@gmail.com](mailto:martin.devolder2@gmail.com). Please encrypt sensitive information using the maintainer's PGP key: + +- **Fingerprint:** `3591 093D FD82 D3C6 DC54 8ED4 1B36 9431 C0BE 4BF0` +- **Key file:** [publickey.asc](./.github/pgp-key.asc) +- **Keyserver:** [keys.openpgp.org](https://keys.openpgp.org/search?q=martin.devolder2%40gmail.com)