Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Revert "Fix links from Security tab of repository." #1156

Merged
merged 1 commit into from
Feb 5, 2025
Merged

Revert "Fix links from Security tab of repository." #1156

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions docs/security.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,11 +10,11 @@ Note: with the v2.x release, v1.x is no longer supported.

## Code signing

All commits by me are signed by my [commit signing GPG key](/docs/commit-sign-key.asc.md).
All commits by me are signed by my [commit signing GPG key](commit-sign-key.asc.md).

## Binary signatures

All releases have a corresponding detactched GPG signature using my [code signing GPG key](/docs/code-sign-key.asc.md).
All releases have a corresponding detactched GPG signature using my [code signing GPG key](code-sign-key.asc.md).

## Reporting a Vulnerability

Expand All @@ -25,7 +25,7 @@ https://github.com/synfinatic/aws-sso-cli/issues/new?assignees=&labels=security&
If you believe the public visibility of the information of the bug would
place other `aws-sso` users at risk, then you may email me at:
`[email protected]`. GPG encrypting your email in those situations is
encouraged and you should use [this GPG Key](/docs/commit-sign-key.asc.md).
encouraged and you should use [this GPG Key](commit-sign-key.asc.md).

## Security Model

Expand All @@ -52,4 +52,4 @@ Running the [ECS Server in docker](ecs-server.md#running-the-ecs-server-in-the-b
(`aws-sso ecs docker start`) will briefly expose your HTTP Authentication bearer token and
SSL private key in clear text in `~/.aws-sso/mnt/`. If you are running it on a system
where the `root` user is not trusted, this may not be acceptable. In such cases, it
is recommended to run `aws-sso ecs server` in a screen or tmux session.
is recommended to run `aws-sso ecs server` in a screen or tmux session.