Join our community: https://t.me/+DOylgFv1jyJlNzM0
Why this matters
The repo root has both SECURITY.md (the standard GitHub-recognized policy) and SECURITY_IMPLEMENTATION_SUMMARY.md (an implementation-detail summary), plus .github/SECURITY_SETUP_CHECKLIST.md. None of the three link to each other, so a reader landing on one may not know the others exist, and updates to security posture risk being made in only one file.
Acceptance criteria
Files to touch
SECURITY.md
SECURITY_IMPLEMENTATION_SUMMARY.md
.github/SECURITY_SETUP_CHECKLIST.md
Out of scope
- Merging the three files into one
- Changing the actual security controls described
Why this matters
The repo root has both
SECURITY.md(the standard GitHub-recognized policy) andSECURITY_IMPLEMENTATION_SUMMARY.md(an implementation-detail summary), plus.github/SECURITY_SETUP_CHECKLIST.md. None of the three link to each other, so a reader landing on one may not know the others exist, and updates to security posture risk being made in only one file.Acceptance criteria
SECURITY.md,SECURITY_IMPLEMENTATION_SUMMARY.md, and.github/SECURITY_SETUP_CHECKLIST.mdFiles to touch
SECURITY.mdSECURITY_IMPLEMENTATION_SUMMARY.md.github/SECURITY_SETUP_CHECKLIST.mdOut of scope