Provide vulnerabilites report information #1214

New issue

Open

opened 2024-06-28 16:37:58 +00:00 by george.bartolomey · 1 comment

george.bartolomey commented

2024-06-28 16:37:58 +00:00

Member

We need to publish information about privately reporting vulnerabilites.

Possible Solution

Add SECURITY.md with information about methods of reporting vulnerabilites, for example:

# Reporting a Vulnerability

Please, don't publish vulnerability, instead send an email to address security @ frostfs.info.

Also, there may be a security policy of the project in SECURITY.md.

We need to publish information about privately reporting vulnerabilites. ## Possible Solution Add SECURITY.md with information about methods of reporting vulnerabilites, for example: ``` # Reporting a Vulnerability Please, don't publish vulnerability, instead send an email to address security @ frostfs.info. ``` Also, there may be a security policy of the project in SECURITY.md.