Skip to content

Commit fd5802b

Browse files
docs: Revise vulnerability reporting instructions in SECURITY.md (#1634)
1 parent 6e731a7 commit fd5802b

1 file changed

Lines changed: 8 additions & 2 deletions

File tree

‎SECURITY.md‎

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,10 +5,16 @@
55
| Version | Supported |
66
| ------- | ------------------ |
77
| 10.1.x | ✅ Feature release |
8-
| 10.0.x | ✅ Fixes only |
8+
| 10.0.x | ⛔ Deprecated |
99
| 9.0.x | ⛔ Deprecated |
1010
| 1.0.x | ⛔ Deprecated |
1111

1212
## Reporting a Vulnerability
1313

14-
To report a vulnerability please contact the development team confidentially on Discord by contacting `@brain` via a DM on https://discord.gg/dpp - We will discuss via a group chat if necessary and action the fix. Vulnerabilities are actioned and fixed within a 30 day window. Once the fix has been put into a release version, the vulnerability will be disclosed to the public.
14+
Please report security vulnerabilities using [GitHub's private vulnerability reporting feature](https://github.com/brainboxdotcc/DPP/security/advisories/new).
15+
16+
This creates a confidential report that is only visible to the repository maintainers and allows us to coordinate a fix before public disclosure.
17+
18+
If you are unable to use GitHub's private reporting feature, you may instead contact the development team confidentially via Discord by sending a direct message to `@brain` in the [DPP server](https://discord.gg/dpp)
19+
20+
We aim to investigate and remediate reported vulnerabilities within 30 days where possible. Once a fix has been released in a supported version, the vulnerability will be disclosed publicly.

0 commit comments

Comments
 (0)