stake-pool: Add security.txt (solana-labs#5929)

* stake-pool: Add security.txt * Update stake-pool/program/src/entrypoint.rs Co-authored-by: Trent Nelson <[email protected]> --------- Co-authored-by: Trent Nelson <[email protected]>
samkim-crypto · Nov 29, 2023 · dc754aa · dc754aa
1 parent f85e0c2
commit dc754aa
Show file tree

Hide file tree

Showing 3 changed files with 18 additions and 0 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/stake-pool/program/Cargo.toml b/stake-pool/program/Cargo.toml
@@ -21,6 +21,7 @@ num_enum = "0.7.1"
 serde = "1.0.193"
 serde_derive = "1.0.103"
 solana-program = "1.17.6"
+solana-security-txt = "1.1.1"
 spl-math = { version = "0.2", path = "../../libraries/math", features = [ "no-entrypoint" ] }
 spl-pod = { version = "0.1", path = "../../libraries/pod", features = ["borsh"] }
 spl-token-2022 = { version = "0.9", path = "../../token/program-2022", features = [ "no-entrypoint" ] }

diff --git a/stake-pool/program/src/entrypoint.rs b/stake-pool/program/src/entrypoint.rs
@@ -8,6 +8,7 @@ use {
         account_info::AccountInfo, entrypoint::ProgramResult, program_error::PrintProgramError,
         pubkey::Pubkey,
     },
+    solana_security_txt::security_txt,
 };
 
 solana_program::entrypoint!(process_instruction);
@@ -24,3 +25,18 @@ fn process_instruction(
         Ok(())
     }
 }
+
+security_txt! {
+    // Required fields
+    name: "SPL Stake Pool",
+    project_url: "https://spl.solana.com/stake-pool",
+    contacts: "link:https://github.com/solana-labs/solana-program-library/security/advisories/new,mailto:[email protected],discord:https://solana.com/discord",
+    policy: "https://github.com/solana-labs/solana-program-library/blob/master/SECURITY.md",
+
+    // Optional Fields
+    preferred_languages: "en",
+    source_code: "https://github.com/solana-labs/solana-program-library/tree/master/stake-pool/program",
+    source_revision: "58c1226a513d3d8bb2de8ec67586a679be7fd2d4",
+    source_release: "stake-pool-v0.6.4",
+    auditors: "https://github.com/solana-labs/security-audits#stake-pool"
+}