Details
-
Suggestion
-
Resolution: Won't Fix
Description
Establish a policy/guidelines for reporting security vulnerabilities with open source projects / instances (e.g. https://help.github.com/en/articles/adding-a-security-policy-to-your-repository) in light of https://spectrum.ieee.org/tech-talk/computing/software/github-releases-new-tools-to-report-vulnerabilities.