From 094dd7fdb3abbcea606c6e9990f01c448aa98017 Mon Sep 17 00:00:00 2001 From: Romain Lespinasse Date: Tue, 14 Mar 2023 19:49:15 +0100 Subject: [PATCH] docs(security): improve vulnerability reporting section Signed-off-by: Romain Lespinasse --- SECURITY.md | 10 ++-------- 1 file changed, 2 insertions(+), 8 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index f7ef76e..9414958 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -24,12 +24,6 @@ When a branch is not supported anymore, the following process occurs ## Reporting a Vulnerability -You can report a Vulnerability by [my email](mailto:romain.lespinasse@gmail.com). +You can report a Vulnerability by creating a (https://github.com/rlespinasse/github-slug-action/security/advisories)[draft security advisory] in this project. -_Vulnerability stages :_ - -- Reported, -- Confirmed (or declined), -- Fixed on maintained version series. - -After a vulnerability fix, an GitHub issue will be created as document this vulnerability. +If the vulnerability is confirm, a fix will be produce and the advisory will be publish.