smw/deskflow
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: point security reports at private disclosure

Browse source
This commit is contained in:
Nick Bolton 2026-09-10 11:09:07 +01:00 committed by Chris Rizzitello
parent 206ee9a155
commit fac2f540c5
1 changed files with 13 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
docs/Security.md
View file

@ -7,5 +7,16 @@ https://github.com/deskflow/deskflow/releases
## Reporting a Vulnerability
Please report vulnerabilities on our issue tracker as bugs:
https://github.com/deskflow/deskflow/issues
Please report vulnerabilities privately, not on the public issue tracker.
Use GitHub's private reporting form:
https://github.com/deskflow/deskflow/security/advisories/new
That opens a draft advisory only visible to maintainers. Include a proof of concept
if you have one.
## What happens next
We land the fix on master, ship it in a continuous build, then publish the advisory
and proof of concept together, so a fixed build is always available at the point the
details go public. You will be credited in the advisory unless you ask otherwise.