SIG.Security Team

Mission

In order to ensure the security of our users, we will need a robust security response protocol. This SIG maintains and operates this protocol.

Organization

• Slack channel: #sig-security
• Mailing list aliase(s):
  • security@voxpupuli.org (public reporting email)
• GitHub repositories:
  • 🔒 https://github.com/voxpupuli/security-tracking
  • 🔒 https://github.com/voxpupuli/gopass-security
• 🔒 Tracking board

Members

The security response team answers the security@voxpupuli.org email address. It is currently made up of:

• @bastelfreak
• @binford2k
• @cestith
• @genebean

The security engineering team collaborates to fix and release security issues as fast as responsibly possible. See https://github.com/orgs/voxpupuli/teams/security

Resources

• Public security policy and reporting page
• gopass-security secret store
  • this store has the security@voxpupuli.org GPG key. All members of the alias will need this key to read encrypted emails.