[
https://issues.apache.org/jira/browse/MNGSITE-503?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17645653#comment-17645653
]
ASF GitHub Bot commented on MNGSITE-503:
----------------------------------------
michael-o commented on PR #354:
URL: https://github.com/apache/maven-site/pull/354#issuecomment-1345360839
@bmarwell I have added a commit which does it right. No fuzz, no additonal
plugins. WFM:
```
Contact: mailto:secur...@apache.org
Contact: mailto:priv...@maven.apache.org
Expires: 2022-12-10T18:48:02Z
Preferred-Languages: en
Policy: https://www.apache.org/security/
Policy: https://maven.apache.org/security.html
```
> add .well-known/security.txt
> ----------------------------
>
> Key: MNGSITE-503
> URL: https://issues.apache.org/jira/browse/MNGSITE-503
> Project: Maven Project Web Site
> Issue Type: Improvement
> Reporter: Benjamin Marwell
> Assignee: Benjamin Marwell
> Priority: Major
> Labels: security
>
> As per consensus on the mailing list (+1 from [~rmannibucau] and me), we
> should add a file `.well-known/security.txt`.
> I will prepare a PR.
> References:
> * [.well-known/security.txt at maven.apache.org
> (mail-archive.com)|https://www.mail-archive.com/dev@maven.apache.org/msg128366.html]
> * [.well-known/security.txt at maven.apache.org-Apache Mail
> Archives|https://lists.apache.org/thread/tvfg1lx9nd72c9t4t4s3zlx6l0tpnmwy]
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
