SECURITY-POLICY.md: added PGP key for encryption

iulianbarbu · alxiord · commit 55a4f6618a8f · 2020-04-06T11:41:26.000+03:00
Sensitive information has to be encrypted before sending it to
&lt;firecracker-security-disclosures@amazon.com&gt;. To this end,
I've added a PGP public key, and updated the SECURITY-POLICY.md
guide.

Signed-off-by: iulianbarbu &lt;iul@amazon.com&gt;
diff --git a/PGP-KEY.asc b/PGP-KEY.asc
@@ -0,0 +1,26 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=1xBx
+-----END PGP PUBLIC KEY BLOCK-----
+
diff --git a/SECURITY-POLICY.md b/SECURITY-POLICY.md
@@ -1,7 +1,8 @@
 # Security Issue Policy
 
 If you uncover a security issue with Firecracker, please write to us on
-<firecracker-security-disclosures@amazon.com>.
+<firecracker-security-disclosures@amazon.com>. Please encrypt sensitive
+information using the [PGP key](PGP-KEY.asc).
 
 Once the Firecracker [maintainers](MAINTAINERS.md) become aware (or are made
 aware) of a security issue, they will immediately assess it. Based on impact and
