We at Confio love open source! We work in the best intent with a public review process but must accept that software can contains bugs and therefore our code, too.
In order to help with resolving any issues on production system, we have started the advisories project to link to authorized communication channels of CosmWasm blockchains. Confio will inform the linked chains about critical issues reported to us directly on non public channels before opening an issue on our related projects. Nevertheless providing this information should not prevent us or anybody else from working on a fix nor block a patch roll out. This also does not include bugs and issues reported to us publicly via github issues or official discord channels. Chains using our projects are encouraged to watch the github repos and official channels on CosmWasm discord in order to maintain their own software stack.
- Run CosmWasm projects on prodution or public testnet
SECURITY.mdin your main repo and main branch with contact details and infos on your disclosure process- Commitment to share issues and bugs with Confio and the CosmWasm community
If your project matches these criteria then please do a PR to add your chain to the list below.
We likely will not have capacity to maintain this service for all versions and projects forever. So we want to keep the right to:
- modify this document
- add/remove project and versions
- change the criterias and revisit the listed members
- not accept every application
Add your project here via a PR if you want to get notified.
| Project name | SECURITY.md |
|---|---|
| Juno | SECURITY.md |
| Nym | SECURITY.md |
| Provenance | SECURITY.md |
| Secret Network | SECURITY.md |
| Stargaze | SECURITY.md |