diff --git a/FAQ.md b/FAQ.md index 698e672..7f117ba 100644 --- a/FAQ.md +++ b/FAQ.md @@ -17,7 +17,7 @@ Awesome! Just bear in mind that because an app only has access to the keychain i ### I have a security issue -Please contact [mailto:max.goedjen@gmail.com](max.goedjen@gmail.com) immediately with details, and I'll address the issue and credit you ASAP. +Please contact [mailto:max.goedjen@gmail.com](max.goedjen@gmail.com) with a subject containing "SECRETIVE SECURITY" immediately with details, and I'll address the issue and credit you ASAP. ### I want to contribute to Secretive diff --git a/README.md b/README.md index cb991d1..4f6fea9 100644 --- a/README.md +++ b/README.md @@ -30,6 +30,10 @@ For Macs without Secure Enclaves, you can configure a Smart Card (such as a Yubi ## Getting Started +### FAQ + +There's a [FAQ here](FAQ.md). + ### Auditable Build Process Builds are produced by GitHub Actions with an auditable build and release generation process. Each build has a "Document SHAs" step, which will output SHA checksums for the build produced by the GitHub Action, so you can verify that the source code for a given build corresponds to any given release. @@ -44,4 +48,4 @@ Beacuse secrets in the Secure Enclave are not exportable, they are not able to b ## Security -If you discover any vulnerabilities in this project, please notify max.goedjen@gmail.com +If you discover any vulnerabilities in this project, please notify [mailto:max.goedjen@gmail.com](max.goedjen@gmail.com) with the subject containing "SECRETIVE SECURITY."