What the developer wrote
Authored by Olaoluwa Osuntokun
security: update security@ PGP key
The key was renewed, but the gist linked in the repo wasn't updated.
What changed, and why it matters
This commit simply updates the documentation link to the project's security contact PGP key. The key itself did not change; only the URL pointing to the renewed key was refreshed. There is no code change and no vulnerability in the software.
No action required; this is a documentation-only update. Reviewers may optionally verify the new gist URL resolves to a valid PGP key with the stated fingerprint.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff updates two markdown files (README.md and SECURITY.md) to point to a new gist URL for the same security@lightning.engineering PGP key fingerprint (91FE464CD75101DA6B6BAB60555C6465E5BCB3AF). The previous gist URL was stale after the key was renewed. No source code, cryptographic logic, or network behavior was modified.
Changed components
README.mdSECURITY.mdInspect captured patch +2 / −2
diff --git a/README.md b/README.md
index 091bb82..e75f3dd 100644
--- a/README.md
+++ b/README.md
@@ -94,7 +94,7 @@ any issues regarding security or privacy, please disclose the information
responsibly by sending an email to security at lightning dot engineering,
preferably encrypted using our designated PGP key
(`91FE464CD75101DA6B6BAB60555C6465E5BCB3AF`) which can be found
-[here](https://gist.githubusercontent.com/Roasbeef/6fb5b52886183239e4aa558f83d085d3/raw/5fa96010af201628bcfa61e9309d9b13d23d220f/security@lightning.engineering).
+[here](https://gist.githubusercontent.com/Roasbeef/6fb5b52886183239e4aa558f83d085d3/raw/1ecb328bbcf36f76ead67f08008f8db1da07e60e/security@lightning.engineering).
## Further reading
* [Step-by-step send payment guide with docker](https://github.com/lightningnetwork/lnd/tree/master/docker)
diff --git a/SECURITY.md b/SECURITY.md
index ea945bd..45453f1 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -8,4 +8,4 @@ The last major lnd release is to be considered the current support version. Give
To report security issues, send an email to security@lightning.engineering (this list isn't to be used for support).
-The following key can be used to communicate sensitive information: `91FE 464C D751 01DA 6B6B AB60 555C 6465 E5BC B3AF`.
+The following key can be used to communicate sensitive information: [`91FE 464C D751 01DA 6B6B AB60 555C 6465 E5BC B3AF`](https://gist.githubusercontent.com/Roasbeef/6fb5b52886183239e4aa558f83d085d3/raw/1ecb328bbcf36f76ead67f08008f8db1da07e60e/security@lightning.engineering).
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.