https://sentry.io/.well-known/security.txt returns 404. RFC 9116 defines /.well-known/security.txt as the standard, machine-discoverable pointer to a project's vulnerability-reporting process. Sentry has a security program, but there's no security.txt advertising it at the well-known path.
Raising as an issue since the site isn't in this repo. A small security.txt (Contact → your security intake, future Expires, Policy) would resolve it.
I used AI assistance to investigate and draft this; I reproduced the 404 myself.
https://sentry.io/.well-known/security.txtreturns 404. RFC 9116 defines/.well-known/security.txtas the standard, machine-discoverable pointer to a project's vulnerability-reporting process. Sentry has a security program, but there's no security.txt advertising it at the well-known path.Raising as an issue since the site isn't in this repo. A small security.txt (Contact → your security intake, future
Expires, Policy) would resolve it.I used AI assistance to investigate and draft this; I reproduced the 404 myself.