From 4680e6af1f692d6f33f24a7e082d9b8ed3bbad5c Mon Sep 17 00:00:00 2001 From: Kobi Hikri Date: Tue, 14 Jul 2026 16:17:06 +0300 Subject: [PATCH] Add RFC 9116 security.txt to linkerd.io/static/.well-known/ Adds a machine-discoverable security contact at /.well-known/security.txt, served by Hugo from linkerd.io/static/. Points to the existing linkerd2 GitHub security-advisory reporting flow. Includes the RFC 9116-mandatory Expires field. Assisted by an AI tool; every line verified against the live site and the linkerd2 SECURITY.md. Signed-off-by: Kobi Hikri --- linkerd.io/static/.well-known/security.txt | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 linkerd.io/static/.well-known/security.txt diff --git a/linkerd.io/static/.well-known/security.txt b/linkerd.io/static/.well-known/security.txt new file mode 100644 index 0000000000..5a11dc5f69 --- /dev/null +++ b/linkerd.io/static/.well-known/security.txt @@ -0,0 +1,6 @@ +# Linkerd security reporting — see https://github.com/linkerd/linkerd2/security/policy +Contact: https://github.com/linkerd/linkerd2/security/advisories/new +Expires: 2027-07-14T00:00:00.000Z +Preferred-Languages: en +Canonical: https://linkerd.io/.well-known/security.txt +Policy: https://github.com/linkerd/linkerd2/security/policy