| Name | Last commit date | |
|---|---|---|
| .. | ||
| irp.md | ||
| README.md | ||
| threat-model-notes.md | ||
| threat-model.md | ||
Security process documents
[!NOTE] To report a vulnerability, see the security policy, which can also be read in the top-level
SECURITY.md.
Table of Contents
The documents in this directory are things we use when managing vulnerabilities:
Incident Response Plan
irp.mdis our incident response plan.
Threat Model
-
threat-model.mdis our provisional threat model outline. -
threat-model-notes.mdare some notes in a different form that have informed it. It overlaps significantly withthreat-model.md, but it may also occasionally be useful to refer to.