Skip to content

Add a SECURITY.md - #1278

Merged
t-bast merged 1 commit into
lightning:masterfrom
kwsantiago:kwsantiago/security
Sep 9, 2025
Merged

t-bast merged 1 commit into
lightning:masterfrom
kwsantiago:kwsantiago/security

Conversation

@kwsantiago

Copy link
Copy Markdown
Contributor

Relates to #1269 and acts as a follow up to #772

@ariard

This comment was marked as abuse.

Comment thread SECURITY.md Outdated
Comment thread SECURITY.md Outdated
Comment thread SECURITY.md Outdated
@kwsantiago
kwsantiago requested a review from TheBlueMatt August 13, 2025 18:52
@ariard

This comment was marked as abuse.

@ariard

This comment was marked as abuse.

@kwsantiago

kwsantiago commented Aug 15, 2025 •

Copy link
Copy Markdown
Contributor Author

@ariard not looking for grants, just looking to help, as I saw this issue was up for grabs in the Issues list. My background for the past decade is in cybersecurity and building custom bitcoin/LN solutions for enterprises.

Happy to close this out if someone else should take over...

@ariard ariard left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@ariard not looking for grants, just looking to help, as I saw this issue was up for grabs in the Issues list. My background for the past decade is in cybersecurity and building custom bitcoin/LN solutions for enterprises.

Apologies if the tone is rude. “Infosec” is always a bit special as due to the nature of the contingencies.


conditional ACK 9ae2085 (pending commits squash)

The simplest and the most minimal SECURITY.md, the better.

Let’s defer to each implementation sec PoC and maintainers what they appreciate as vulns. Even for spec-level vulns, historically the level of severity has used to vary in consequence due to the specificities of the technical architecture of each implem.

@t-bast t-bast left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ACK ce55964

@vincenzopalazzo vincenzopalazzo left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@t-bast t-bast mentioned this pull request Sep 3, 2025
15 of 26 tasks

@Roasbeef Roasbeef left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 🥮

@Roasbeef

Roasbeef commented Sep 6, 2025

Copy link
Copy Markdown
Collaborator

Just needs a CLN approval?

@ddustin

ddustin commented Sep 8, 2025

Copy link
Copy Markdown
Collaborator

ACK ce55964

@rustyrussell

Copy link
Copy Markdown
Collaborator

Ack ce55964

@t-bast
t-bast merged commit 14272b1 into lightning:master Sep 9, 2025
@kwsantiago
kwsantiago deleted the kwsantiago/security branch September 10, 2025 00:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants