From: Ashley Williams Date: Thu, 29 Jun 2017 00:16:00 +0000 (-0400) Subject: feat(policy): add information on security disclosures X-Git-Tag: archive/raspbian/0.35.0-2+rpi1~3^2^2^2^2^2^2^2~22^2~8^2~20^2 X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=6fb3e6804f1471412aec5621e75ef1d6965321d9;p=cargo.git feat(policy): add information on security disclosures --- diff --git a/src/doc/policies.md b/src/doc/policies.md index 1c18412c2..c8b3c1c28 100644 --- a/src/doc/policies.md +++ b/src/doc/policies.md @@ -56,5 +56,16 @@ There are two important, related aspects: cannot be directly answered in the hypothetical sense. All of the details must be taken into consideration in these kinds of situations. +# Security + +Cargo and crates.io are projects that are governed by the Rust Programming +Language Team. Safety is one of the core principles of Rust, and to that end, +we would like to ensure that cargo and crates.io have secure implementations. +To learn more about disclosing security vulnerabilities, please reference the +[Rust Security policy] for more details. + +Thank you for taking the time to responsibly disclose any issues you find. + +[Rust Security policy]: https://www.rust-lang.org/security.html [Code of Conduct]: https://www.rust-lang.org/conduct.html [sending us an email]: mailto:help@crates.io