1
0
Fork 0
mirror of https://github.com/sourcegraph/jsonrpc2.git synced 2026-06-16 04:04:56 +02:00

Update security policy to use email for reporting

This commit is contained in:
Will Dollman 2023-09-25 11:50:00 +01:00
parent 510183e882
commit e4e2e6324c

View file

@ -8,6 +8,6 @@ Security updates are applied only to the latest release.
If you have discovered a security vulnerability in this project, please report it privately. **Do not disclose it as a public issue.** This gives us time to work with you to evaluate and fix the issue before public exposure, reducing the chance that the exploit will be used before a patch is released.
Please disclose it at our [security advisory](https://github.com/sourcegraph/jsonrpc2/security/advisories/new).
Please disclose it privately via email to security@sourcegraph.com. We will work with you to understand and resolve the issue promptly.
This project is maintained by a team of volunteers on a reasonable-effort basis. As such, vulnerabilities will be handled and/or disclosed in a best effort base.