keb
e28328ef82
SECURITY.md asks for vulnerabilities to be reported privately, through GitHub's private vulnerability reporting or by email to karl-einarb@outlook.com. docs/development.md: the "Pull requests" heading is now "How changes land". The section covers squash merges, PR titles and branch protection, not how to send one. Reviewed-on: #65 Co-authored-by: Karl-Einar Bergstrøm <karl-einarb@outlook.com>
12 lines
400 B
Markdown
12 lines
400 B
Markdown
# Security
|
|
|
|
Please report a vulnerability privately, not in a public issue:
|
|
|
|
- on GitHub, with **Report a vulnerability** under the
|
|
[Security tab](https://github.com/karleinarb/lazysecrets/security), or
|
|
- by email to karl-einarb@outlook.com.
|
|
|
|
Say what's affected, how to reproduce it and the version
|
|
(`lazysecrets --version`). Fixes go into the next release, and only the
|
|
latest release gets them.
|