Skip to content

Commit cc57844

Browse files
authored
Fix link for GH private vulnerability reporting (#6)
1 parent ca437c1 commit cc57844

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

SECURITY.md

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
# Security Policy
22

33
[![OpenSSF Vulnerability Disclosure](https://img.shields.io/badge/OpenSSF-Vulnerability_Disclosure-green)][openssf-cvd-finders-guide]
4-
[![GitHub Report](https://img.shields.io/badge/GitHub-Security_Advisories-blue)][github-advisory-new]
4+
[![GitHub Report](https://img.shields.io/badge/GitHub-Security_Advisories-blue)][github-private-vulnerability-reporting]
55
[![Email Report](https://img.shields.io/badge/Email-security%40erlef.org-blue)][email]
66

77
We take the security of this software seriously and are committed to ensuring
@@ -14,7 +14,8 @@ You can learn more about it in the [Finders Guide][openssf-cvd-finders-guide].
1414
## Reporting Security Issues
1515

1616
If you believe you have found a security vulnerability in this repository,
17-
please report it via [GitHub Security Vulnerability Reporting][github-advisory-new]
17+
please report it via [GitHub Security Vulnerability Reporting][github-private-vulnerability-reporting]
18+
at `github.com/erlef/<project>/security/advisories/new`
1819
or via email to [`[email protected]`][email] if that is more suitable for you.
1920

2021
**Please do not report vulnerabilities through public channels** such as GitHub
@@ -45,5 +46,5 @@ vulnerability management team at [`[email protected]`][email].
4546

4647
[openssf-cvd-guide]: https://github.com/ossf/oss-vulnerability-guide/tree/main
4748
[openssf-cvd-finders-guide]: https://github.com/ossf/oss-vulnerability-guide/blob/main/finder-guide.md
48-
[github-advisory-new]: /security/advisories/new
49+
[github-private-vulnerability-reporting]: https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing-information-about-vulnerabilities/privately-reporting-a-security-vulnerability#privately-reporting-a-security-vulnerability
4950
[email]: mailto:[email protected]

0 commit comments

Comments
 (0)