paul/picpeak
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

Merge pull request #225 from the-luap/fix/security-reporting-policy

Browse Source 
fix: update security policy with private reporting channels
This commit is contained in:
Paul Nothaft
2026-03-11 20:47:41 +01:00
committed by GitHub
parent 25b40c03b0 67b0f32456
commit 7f7736282f
2 changed files with 7 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/ISSUE_TEMPLATE/security_vulnerability.md
+1 -1
View File
@@ -9,7 +9,7 @@ assignees: ''
⚠️ **IMPORTANT: For serious security vulnerabilities, please DO NOT create a public issue.** ⚠️ **IMPORTANT: For serious security vulnerabilities, please DO NOT create a public issue.**
Instead, please email security@example.com with the details. Instead, please use [GitHub Private Vulnerability Reporting](https://github.com/the-luap/picpeak/security/advisories/new) or email **[email protected]** with the details.
For minor security improvements or questions, you can use this template: For minor security improvements or questions, you can use this template:
SECURITY.md
+6 -6
View File
@@ -6,8 +6,8 @@ We release patches for security vulnerabilities. Currently supported versions:
| Version | Supported | | Version | Supported |
| ------- | ------------------ | | ------- | ------------------ |
| 1.x.x | :white_check_mark: | | 2.x.x | :white_check_mark: |
| < 1.0 | :x: | | < 2.0 | :x: |
## Reporting a Vulnerability ## Reporting a Vulnerability
@@ -15,9 +15,9 @@ We take the security of PicPeak seriously. If you have discovered a security vul
### 1. **Do NOT create a public GitHub issue** ### 1. **Do NOT create a public GitHub issue**
### 2. Report the vulnerability by: ### 2. Report the vulnerability privately by:
- Opening a [security issue](https://github.com/the-luap/picpeak/issues/new?labels=security) on GitHub - **Preferred:** Use [GitHub Private Vulnerability Reporting](https://github.com/the-luap/picpeak/security/advisories/new)
- Mark it clearly as "SECURITY" in the title - **Alternative:** Email us at **[email protected]** with the details
- Include: - Include:
- Description of the vulnerability - Description of the vulnerability
- Steps to reproduce - Steps to reproduce
@@ -82,7 +82,7 @@ We believe in responsible disclosure. Once a vulnerability is fixed:
## Contact ## Contact
- Security issues: [Create a security issue](https://github.com/the-luap/picpeak/issues/new?labels=security) on GitHub - Security issues: Email **[email protected]** or use [GitHub Private Vulnerability Reporting](https://github.com/the-luap/picpeak/security/advisories/new)
- General support: [GitHub Issues](https://github.com/the-luap/picpeak/issues) - General support: [GitHub Issues](https://github.com/the-luap/picpeak/issues)
Thank you for helping keep PicPeak and its users safe! Thank you for helping keep PicPeak and its users safe!