GH-900 · Question #5
What is the primary purpose of creating a security policy in a repository?
The correct answer is C. To describe how security vulnerabilities should be responsibly disclosed. The primary purpose of creating a security policy in a GitHub repository is to guide users and contributors on how to report security vulnerabilities in a responsible and secure manner. This policy outlines the preferred method of communication, timelines, and any other…
Question
What is the primary purpose of creating a security policy in a repository?
Options
- ATo ensure that peer code review occurs before new changes are merged
- BTo define which types of secrets are blocked with push protection
- CTo describe how security vulnerabilities should be responsibly disclosed
- DTo customize the repository's Dependabot configuration
How the community answered
(62 responses)- A2% (1)
- B3% (2)
- C95% (59)
Explanation
The primary purpose of creating a security policy in a GitHub repository is to guide users and contributors on how to report security vulnerabilities in a responsible and secure manner. This policy outlines the preferred method of communication, timelines, and any other pertinent information related to handling security issues. Security Policy: Option C is correct because a security policy provides guidelines for responsibly disclosing security vulnerabilities. This helps maintainers respond to and address security concerns promptly and securely, thereby protecting the project and its users.
Topics
Community Discussion
No community discussion yet for this question.