From fd6cc8197b686978282a0fd5ef38e0e3450a1d69 Mon Sep 17 00:00:00 2001 From: Kobi Hikri Date: Tue, 14 Jul 2026 17:53:43 +0300 Subject: [PATCH] Add RFC 9116 security.txt to static/.well-known/ Adds a machine-discoverable security contact at /.well-known/security.txt, served by Hugo from static/. Points to the existing sops GitHub security- advisory reporting flow. Includes the RFC 9116-mandatory Expires field. Assisted by an AI tool; every line verified against the live site and the sops security policy. Signed-off-by: Kobi Hikri --- static/.well-known/security.txt | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 static/.well-known/security.txt diff --git a/static/.well-known/security.txt b/static/.well-known/security.txt new file mode 100644 index 0000000..f496742 --- /dev/null +++ b/static/.well-known/security.txt @@ -0,0 +1,6 @@ +# sops security reporting — see https://github.com/getsops/sops/security/policy +Contact: https://github.com/getsops/sops/security/advisories/new +Expires: 2027-07-14T00:00:00.000Z +Preferred-Languages: en +Canonical: https://getsops.io/.well-known/security.txt +Policy: https://github.com/getsops/sops/security/policy