token-2022: Add security.txt (#5928)

token-2022: Add security.txt support

Author: joncinque

Cargo.lock

@@ -24,6 +24,7 @@ num-derive = "0.4"
 num-traits = "0.2"
 num_enum = "0.7.1"
 solana-program = "1.17.6"
+solana-security-txt = "1.1.1"
 solana-zk-token-sdk = "1.17.6"
 spl-memo = { version = "4.0.0", path = "../../memo/program", features = [ "no-entrypoint" ] }
 spl-token = { version = "4.0",  path = "../program", features = ["no-entrypoint"] }

token/program-2022/Cargo.toml

@@ -6,6 +6,7 @@ use {
         account_info::AccountInfo, entrypoint::ProgramResult, program_error::PrintProgramError,
         pubkey::Pubkey,
     },
+    solana_security_txt::security_txt,
 };
 
 solana_program::entrypoint!(process_instruction);
@@ -21,3 +22,18 @@ fn process_instruction(
     }
     Ok(())
 }
+
+security_txt! {
+    // Required fields
+    name: "SPL Token-2022",
+    project_url: "https://spl.solana.com/token-2022",
+    contacts: "link:https://github.com/solana-labs/solana-program-library/security/advisories/new,mailto:[email protected],discord:https://discord.gg/solana",
+    policy: "https://github.com/solana-labs/solana-program-library/blob/master/SECURITY.md",
+
+    // Optional Fields
+    preferred_languages: "en",
+    source_code: "https://github.com/solana-labs/solana-program-library/tree/master/token/program-2022",
+    source_revision: "79a575fb7af56d26deeda94fef8f55bde7a90df3",
+    source_release: "token-2022-v0.9.0",
+    auditors: "https://github.com/solana-labs/security-audits#token-2022"
+}