add security txt

Cargo.lock

@@ -5646,6 +5646,12 @@ dependencies = [
  "syn 1.0.107",
 ]
 
+[[package]]
+name = "solana-security-txt"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7e0461f3afb29d8591300b3dd09b5472b3772d65688a2826ad960b8c0d5fa605"
+
 [[package]]
 name = "solana-send-transaction-service"
 version = "1.14.12"
@@ -6126,6 +6132,7 @@ dependencies = [
  "solana-program",
  "solana-program-test",
  "solana-sdk",
+ "solana-security-txt",
  "spl-governance-addin-api",
  "spl-governance-addin-mock",
  "spl-governance-test-sdk",

governance/program/Cargo.toml

@@ -20,6 +20,7 @@ num-traits = "0.2"
 serde = "1.0.162"
 serde_derive = "1.0.103"
 solana-program = "1.14.12"
+solana-security-txt = "1.1.0"
 spl-token = { version = "3.5", path = "../../token/program", features = [ "no-entrypoint" ] }
 spl-governance-tools= { version = "0.1.3", path ="../tools"}
 spl-governance-addin-api= { version = "0.1.3", path ="../addin-api"}

governance/program/src/lib.rs

@@ -12,6 +12,7 @@ pub mod tools;
 
 // Export current sdk types for downstream users building with a different sdk version
 pub use solana_program;
+pub mod meta;
 
 /// Seed prefix for Governance  PDAs
 /// Note: This prefix is used for the initial set of PDAs and shouldn't be used for any new accounts

governance/program/src/meta.rs

@@ -0,0 +1,19 @@
+#![allow(missing_docs)]
+
+#[cfg(not(feature = "no-entrypoint"))]
+use solana_security_txt::security_txt;
+
+#[cfg(not(feature = "no-entrypoint"))]
+security_txt! {
+    // Required fields
+    name: "Mango DAO Governance Program",
+    project_url: "https://dao.mango.markets/",
+    contacts: "email:blockworks@protonmail.com",
+    policy: "https://docs.mango.markets/mango-markets/bug-bounty",
+
+    // Optional Fields
+    source_code: "https://github.com/blockworks-foundation/solana-program-library",
+    source_revision: env!("GITHUB_SHA"),
+    source_release: env!("GITHUB_REF_NAME"),
+    auditors: "Neodyme,OtterSec"
+}