What is a security policy?

The correct answer is B. a file in a GitHub repository that provides instructions to users about how to report a security. A security policy is a file (typically SECURITY.md) stored in a GitHub repository that instructs users and contributors on how to responsibly report security vulnerabilities. It defines the disclosure process and contact points for the project maintainers. It is not an alert (A…

Best Practices and Remediation

Question

Options

Aa security alert issued to a community in response to a vulnerability
Ba file in a GitHub repository that provides instructions to users about how to report a security
Can alert about dependencies that are known to contain security vulnerabilities
Dan automatic detection of security vulnerabilities and coding errors in new or modified code

How the community answered

(31 responses)

A
6% (2)
B
87% (27)
C
3% (1)
D
3% (1)

Explanation

A security policy is a file (typically SECURITY.md) stored in a GitHub repository that instructs users and contributors on how to responsibly report security vulnerabilities. It defines the disclosure process and contact points for the project maintainers. It is not an alert (A or C) nor an automated scanning feature (D). GitHub surfaces this file prominently in the Security tab so that anyone discovering a vulnerability knows the proper reporting channel.

Topics

#GitHub Security Policy#SECURITY.md#Vulnerability Disclosure#Best Practices

Community Discussion

No community discussion yet for this question.

Full GH-500 Practice