Yearn's security policy is available at https://github.com/yearn/yearn-security/blob/master/SECURITY.md
This git repository is a central place for all other security-related information about the Yearn project. It includes the following:
- Security contact PGP keys (
keys/
) - Public disclosures (
disclosures/
) - Security adits (
audits/
)
The files contained in this repository can be verified in two ways:
- By verifying the git commit tags (
git tag -v
) - By verifying the detached PGP signatures provided for most files included here