From 2b0f47306bb2be42f778d85571ad8db46b65ef91 Mon Sep 17 00:00:00 2001 From: Stephen Augustus Date: Mon, 14 Dec 2020 02:35:52 -0500 Subject: [PATCH] README.md: Use maintainers list for reporting security issues Signed-off-by: Stephen Augustus --- README.md | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index f4277345..0199ccc5 100644 --- a/README.md +++ b/README.md @@ -103,7 +103,11 @@ All changes or deprecations of connector features will be announced in the [rele ## Reporting a security vulnerability -Due to their public nature, GitHub and mailing lists are NOT appropriate places for reporting vulnerabilities. Please refer to CoreOS's [security disclosure][disclosure] process when reporting issues that may be security related. +Due to their public nature, GitHub and mailing lists are NOT appropriate places +for reporting vulnerabilities. + +Please email the [maintainers list][maintainers-list] to report issues that may +be security-related. ## Getting help @@ -126,4 +130,4 @@ on the Kubernetes Slack, or join the [dex-dev][dex-dev] mailing list. [issues]: https://github.com/dexidp/dex/issues [dex-dev]: https://groups.google.com/forum/#!forum/dex-dev [slack]: slack://channel?team=T09NY5SBT&id=C011URMR41W -[disclosure]: https://coreos.com/security/disclosure/ +[maintainers-list]: mailto:cncf-dex-maintainers@lists.cncf.io