Merge pull request #8617 from lfatty/main

adding security.txt for vulnerability disclosure report
cfpb · Oct 29, 2024 · 4bc2a98 · 4bc2a98
2 parents 2a3580e + 407d37f
commit 4bc2a98
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 0 deletions.
diff --git a/cfgov/apache/conf.d/alias.conf b/cfgov/apache/conf.d/alias.conf
@@ -12,3 +12,5 @@ Alias /akamai/sureroute-test-object.html ${STATIC_PATH}/akamai-sureroute-test-ob
 Alias /utilities/pages/akamai-sureroute-test-object.htm ${STATIC_PATH}/akamai-sureroute-test-object.html
 # Main static alias
 Alias /static/ ${STATIC_PATH}/
+# Security.txt for CVE disclosure
+Alias /security.txt ${STATIC_PATH}/security.txt
diff --git a/cfgov/unprocessed/root/security.txt b/cfgov/unprocessed/root/security.txt
@@ -0,0 +1,11 @@
+#To Submit a Cybersecurity Vulnerability Disclosure Report:         
+Contact: mailto:[email protected]
+
+#Vulnerability Disclosure Policy
+Policy: https://www.consumerfinance.gov/vulnerability-disclosure-policy/
+
+#Hiring Opportunities
+Hiring: https://www.consumerfinance.gov/about-us/careers/
+
+#Security.txt Information Expiration
+Expires: 2025-10-01T00:00:00.000Z