Merge pull request #4626 from IntersectMBO/lehins/fix-codeowners

Fix CODEOWNERS

CODEOWNERS

@@ -1,7 +1,10 @@
 # code owners are automatically assigned to review PRs
 
 # DevX
-*.nix       @input-output-hk/core-tech-devx @input-output-hk/core-tech-release
-nix         @input-output-hk/core-tech-devx @input-output-hk/core-tech-release
-flake.lock  @input-output-hk/core-tech-devx @input-output-hk/core-tech-release
-.github     @input-output-hk/core-tech-devx @input-output-hk/core-tech-release
+*.nix       @IntersectMBO/core-tech-devx
+nix         @IntersectMBO/core-tech-devx
+flake.lock  @IntersectMBO/core-tech-devx
+.github     @IntersectMBO/cardano-ledger-maintainers
+
+
+* @IntersectMBO/cardano-ledger-maintainers

SECURITY.md

@@ -1 +1,18 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+Please report (suspected) security vulnerabilities to security@intersectmbo.org. You will receive a
+response from us within 48 hours. If the issue is confirmed, we will release a patch as soon
+as possible.
+
+Please provide a clear and concise description of the vulnerability, including:
+
+* the affected version(s) of OSC-documentation,
+* steps that can be followed to exercise the vulnerability,
+* any workarounds or mitigations
+
+If you have developed any code or utilities that can help demonstrate the suspected
+vulnerability, please mention them in your email but ***DO NOT*** attempt to include them as
+attachments as this may cause your Email to be blocked by spam filters.
 See the security file in the [Cardano engineering handbook](https://github.com/input-output-hk/cardano-engineering-handbook/blob/main/SECURITY.md).