Obol's security policy is available at https://github.com/ObolNetwork/obol-security/blob/main/SECURITY.md
This git repository is a central place for all other security-related information about the Obol project. It includes the following:
- Security audits (
audits
) - Public disclosures (
disclosures
) - Security contact PGP keys (
keys
) - Incidents postmortems (
postmortems
)
The files contained in this repository can be verified in two ways:
- By verifying the git commit tags (
git tag -v
) - By verifying the detached PGP signatures provided for most files included here