Skip to content

Commit

Permalink
Update security policy
Browse files Browse the repository at this point in the history
GitHub security advisories have been enabled, so update the security policy accordingly
  • Loading branch information
dhui committed Jan 11, 2023
1 parent 145baa1 commit dc26c41
Showing 1 changed file with 1 addition and 4 deletions.
5 changes: 1 addition & 4 deletions SECURITY.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,9 +11,6 @@

## Reporting a Vulnerability

For a [full disclosure](https://en.wikipedia.org/wiki/Full_disclosure_(computer_security)), create a GitHub issue.

For a [coordinated disclosure](https://en.wikipedia.org/wiki/Coordinated_vulnerability_disclosure), email golangmigrate@proton.me and then create a GitHub issue notifying the maintainers that there's a new vulnerability (without the details).
We won't be checking that email address regularly so it's important to also create a GitHub issue to notify us.
We prefer [coordinated disclosures](https://en.wikipedia.org/wiki/Coordinated_vulnerability_disclosure). To start one, create a GitHub security advisory following [these instructions](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability)

Please suggest potential impact and urgency in your reports.

0 comments on commit dc26c41

Please sign in to comment.