From b19a9d323c63ab784bd40a7d6f38acbbdbde82b5 Mon Sep 17 00:00:00 2001 From: Promise Olubudo <254755326+baedboibidex-cmyk@users.noreply.github.com> Date: Thu, 30 Jul 2026 10:16:24 +0000 Subject: [PATCH] docs(security): add cross-references between security policy documents --- .github/SECURITY_SETUP_CHECKLIST.md | 2 +- SECURITY.md | 2 ++ SECURITY_IMPLEMENTATION_SUMMARY.md | 2 +- 3 files changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/SECURITY_SETUP_CHECKLIST.md b/.github/SECURITY_SETUP_CHECKLIST.md index c2ac837d..824616c5 100644 --- a/.github/SECURITY_SETUP_CHECKLIST.md +++ b/.github/SECURITY_SETUP_CHECKLIST.md @@ -1,6 +1,6 @@ # GitHub Security Setup Checklist -This checklist helps ensure that GitHub's security features are properly configured for the FlowFi repository. +This checklist helps repository administrators ensure that GitHub's security features are properly configured for the FlowFi repository. For the canonical security policy (reporting guidelines, supported versions, response timelines), see [SECURITY.md](../SECURITY.md). For the implementation status and next steps, see [SECURITY_IMPLEMENTATION_SUMMARY.md](../SECURITY_IMPLEMENTATION_SUMMARY.md). ## Repository Security Settings diff --git a/SECURITY.md b/SECURITY.md index 7db9a99b..9027f1a6 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -1,5 +1,7 @@ # Security Policy +This is the canonical security policy for FlowFi. It defines how vulnerabilities are reported, which versions are supported, and the responsible disclosure process. For contributors and administrators setting up repository security features, see [SECURITY_IMPLEMENTATION_SUMMARY.md](SECURITY_IMPLEMENTATION_SUMMARY.md). For the GitHub setup checklist, see [.github/SECURITY_SETUP_CHECKLIST.md](.github/SECURITY_SETUP_CHECKLIST.md). + ## Supported Versions We actively support the following versions of FlowFi with security updates: diff --git a/SECURITY_IMPLEMENTATION_SUMMARY.md b/SECURITY_IMPLEMENTATION_SUMMARY.md index 7317d864..5ac6ee1d 100644 --- a/SECURITY_IMPLEMENTATION_SUMMARY.md +++ b/SECURITY_IMPLEMENTATION_SUMMARY.md @@ -1,6 +1,6 @@ # Security Policy Implementation Summary -This document summarizes the security policy implementation for FlowFi and provides next steps for repository administrators. +This document is a **maintenance and onboarding guide** for repository administrators and contributors. It tracks which security measures have been implemented and what steps remain. It is not a replacement for the security policy itself. For the canonical security policy (reporting guidelines, supported versions, response timelines), see [SECURITY.md](SECURITY.md). For the GitHub security setup checklist, see [.github/SECURITY_SETUP_CHECKLIST.md](.github/SECURITY_SETUP_CHECKLIST.md). ## ✅ Completed Tasks