security.txt

Usage

You can either:

• use the following origin for your site's /.well-known/security.txt:
  https://vdp.cabinetoffice.gov.uk/.well-known/security.txt

• do a 302 redirect to:
  https://vdp.cabinetoffice.gov.uk/.well-known/security.txt

This is so that we can update the security.txt from one place.

Deployment

A GitHub Action deploys changes to security.txt in main to GOV.UK PaaS.
The deployment also occurs every week to update the expires field.