README.md: Use maintainers list for reporting security issues

Signed-off-by: Stephen Augustus <saugustus@vmware.com>
This commit is contained in:
Stephen Augustus 2020-12-14 02:35:52 -05:00
parent 324b1c886b
commit 2b0f47306b

View File

@ -103,7 +103,11 @@ All changes or deprecations of connector features will be announced in the [rele
## Reporting a security vulnerability ## Reporting a security vulnerability
Due to their public nature, GitHub and mailing lists are NOT appropriate places for reporting vulnerabilities. Please refer to CoreOS's [security disclosure][disclosure] process when reporting issues that may be security related. Due to their public nature, GitHub and mailing lists are NOT appropriate places
for reporting vulnerabilities.
Please email the [maintainers list][maintainers-list] to report issues that may
be security-related.
## Getting help ## Getting help
@ -126,4 +130,4 @@ on the Kubernetes Slack, or join the [dex-dev][dex-dev] mailing list.
[issues]: https://github.com/dexidp/dex/issues [issues]: https://github.com/dexidp/dex/issues
[dex-dev]: https://groups.google.com/forum/#!forum/dex-dev [dex-dev]: https://groups.google.com/forum/#!forum/dex-dev
[slack]: slack://channel?team=T09NY5SBT&id=C011URMR41W [slack]: slack://channel?team=T09NY5SBT&id=C011URMR41W
[disclosure]: https://coreos.com/security/disclosure/ [maintainers-list]: mailto:cncf-dex-maintainers@lists.cncf.io