mirror of
https://github.com/WeblateOrg/weblate.git
synced 2026-07-27 20:34:51 +08:00
1f52dd7e66
This just better documents existing practices and consolidates documentation in a shape that it is easier to find.
60 lines
1.7 KiB
ReStructuredText
Vendored
60 lines
1.7 KiB
ReStructuredText
Vendored
Security, privacy and compliance
|
|
================================
|
|
|
|
.. tip::
|
|
|
|
At Weblate, security maintains an environment that values the privacy of our users.
|
|
|
|
Development of Weblate adheres to the `Best Practices of the Open Source Security Foundation <https://www.bestpractices.dev/en/projects/552>`_.
|
|
|
|
.. seealso::
|
|
|
|
Discovered a security issue in Weblate? Please read :ref:`security`.
|
|
|
|
Security updates and releases
|
|
-----------------------------
|
|
|
|
Only the latest Weblate release is guaranteed to receive security updates.
|
|
Learn more about :doc:`Weblate releases and supported versions <releases>`.
|
|
|
|
Release artifacts can be checked using published signatures, attestations, and
|
|
SBOMs. See :doc:`release-artifacts`.
|
|
|
|
Security policies
|
|
-----------------
|
|
|
|
* :doc:`product-information` - product identity, contact, support, release,
|
|
and SBOM metadata.
|
|
* :doc:`governance` - security governance documentation and assessment status.
|
|
* :doc:`releases` - release cycle, security update coverage, and upgrade
|
|
support.
|
|
* :doc:`release-artifacts` - release artifact inventory, SBOMs, signatures,
|
|
attestations, and verification.
|
|
* :doc:`dependencies` - dependency inventory, vulnerability triage, update
|
|
automation, and container scanning.
|
|
* :doc:`issues` - vulnerability reporting and disclosure.
|
|
* :doc:`disaster-recovery-plan`
|
|
* :doc:`incident-response-plan`
|
|
* :doc:`passwords`
|
|
* :doc:`threat-model`
|
|
|
|
Compliance
|
|
----------
|
|
|
|
.. include:: /snippets/compliance-warning.rst
|
|
|
|
* :doc:`privacy-compliance`
|
|
* :doc:`data-residency`
|
|
* :doc:`us-compliance`
|
|
* :doc:`/contributing/license`
|
|
|
|
Terms of service and privacy policy
|
|
-----------------------------------
|
|
|
|
.. include:: /snippets/hosted-legal-documents.rst
|
|
|
|
|
|
Guidelines
|
|
----------
|
|
|
|
* :doc:`localization-threat`
|
