Question
What is a security policy?
- A. a security alert issued to a community in response to a vulnerability
- B. a file in a GitHub repository that provides instructions to users about how to report a security vulnerability Correct
- C. an alert about dependencies that are known to contain security vulnerabilities
- D. an automatic detection of security vulnerabilities and coding errors in new or modified code
Explanation
A security policy is a SECURITY.md file in a repository that tells people how to report a security vulnerability responsibly. An alert issued to a community about a vulnerability describes a security advisory. An alert about vulnerable dependencies is a Dependabot alert. Automatic detection of vulnerabilities and coding errors in code is code scanning.
