mirror of
https://github.com/maxgoedjen/secretive.git
synced 2025-04-10 17:47:19 +00:00
.
This commit is contained in:
parent
8fd3ee41e3
commit
72c5416959
2
FAQ.md
2
FAQ.md
@ -17,7 +17,7 @@ Awesome! Just bear in mind that because an app only has access to the keychain i
|
||||
|
||||
### I have a security issue
|
||||
|
||||
Please contact [mailto:max.goedjen@gmail.com](max.goedjen@gmail.com) immediately with details, and I'll address the issue and credit you ASAP.
|
||||
Please contact [mailto:max.goedjen@gmail.com](max.goedjen@gmail.com) with a subject containing "SECRETIVE SECURITY" immediately with details, and I'll address the issue and credit you ASAP.
|
||||
|
||||
### I want to contribute to Secretive
|
||||
|
||||
|
@ -30,6 +30,10 @@ For Macs without Secure Enclaves, you can configure a Smart Card (such as a Yubi
|
||||
|
||||
## Getting Started
|
||||
|
||||
### FAQ
|
||||
|
||||
There's a [FAQ here](FAQ.md).
|
||||
|
||||
### Auditable Build Process
|
||||
|
||||
Builds are produced by GitHub Actions with an auditable build and release generation process. Each build has a "Document SHAs" step, which will output SHA checksums for the build produced by the GitHub Action, so you can verify that the source code for a given build corresponds to any given release.
|
||||
@ -44,4 +48,4 @@ Beacuse secrets in the Secure Enclave are not exportable, they are not able to b
|
||||
|
||||
## Security
|
||||
|
||||
If you discover any vulnerabilities in this project, please notify max.goedjen@gmail.com
|
||||
If you discover any vulnerabilities in this project, please notify [mailto:max.goedjen@gmail.com](max.goedjen@gmail.com) with the subject containing "SECRETIVE SECURITY."
|
||||
|
Loading…
Reference in New Issue
Block a user