securitytxt.org | Static website for security.txt | Static Site Generator library
kandi X-RAY | securitytxt.org Summary
kandi X-RAY | securitytxt.org Summary
Static website for security.txt.
Support
Quality
Security
License
Reuse
Top functions reviewed by kandi - BETA
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of securitytxt.org
securitytxt.org Key Features
securitytxt.org Examples and Code Snippets
Community Discussions
Trending Discussions on securitytxt.org
QUESTION
I've got a documentation website populated from the Github master branch for my documentation project.
I'd like https://
mydomain/.well-known/security.txt
to serve the file under tree/master/.well-known/security.txt
per securitytxt.org which says
security.txt defines a standard to help organizations define the process for security researchers to disclose security vulnerabilities securely.
For websites, the security.txt file should be placed under the
/.well-known/
path (/.well-known/security.txt
) [RFC5785]. It can also be placed in the root directory (/security.txt
) of a website, especially if the/.well-known/
directory cannot be used for technical reasons, or simply as a fallback.
The problem I'm seeing is that .well-known
seems to be ignored by Github pages presumably because it's a hidden file per POSIX file conventions. Is this configurable?
I could use the fallback quoted above, but I'd rather follow the RFC5785 if possible.
For reference, the project I'm currently concerned about is https://github.com/temper-lang/docs and I expect the security.txt to show up at https://temperlang.dev/.well-known/security.txt but get a 404.
Below is a screenshot of my Github pages config:
...ANSWER
Answered 2019-Nov-24 at 06:28It may not be a solution for you if your site is using Jekyll, but in my case I was able to enable serving of files beginning with a dot by creating a .nojekyll
file in the root of the Github pages repository.
I found this by doing a few more searches on Stackoverflow. Credit to this answer.
Community Discussions, Code Snippets contain sources that include Stack Exchange Network
Vulnerabilities
No vulnerabilities reported
Install securitytxt.org
Support
Reuse Trending Solutions
Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items
Find more librariesStay Updated
Subscribe to our newsletter for trending solutions and developer bootcamps
Share this Page