gian/cubefs
1
0
Fork 0
mirror of https://github.com/cubefs/cubefs.git synced 2026-08-02 02:00:56 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

chore: add security policy

Browse Source 
Closes #1735

Signed-off-by: pengtianyue <pengtianyue@oppo.com>
This commit is contained in:
pengtianyue 2023-04-14 16:47:58 +08:00 committed by leonrayang
parent 55ef408c8d
commit 025e34a9bb
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
security/README.md → SECURITY.md
View File

@ -4,7 +4,7 @@ Join the [cubefs-users@groups.io](mailto:cubefs-users@groups.io) group for email
## Report a Vulnerability
We’re extremely grateful for security researchers and users that report vulnerabilities to the CubeFS Open Source Community. All reports are thoroughly investigated by a dedicated committee of community volunteers called [Product Security Committee](security-release-process.md#product-security-committee).
We’re extremely grateful for security researchers and users that report vulnerabilities to the CubeFS Open Source Community. All reports are thoroughly investigated by a dedicated committee of community volunteers called [Product Security Committee](./security/security-release-process.md#product-security-committee).
To make a report, please email the private [cubefs-users@groups.io](mailto:cubefs-users@groups.io) list with the security details and the details expected for [all CubeFS bug reports](https://github.com/cubefs/cubefs/blob/master/CONTRIBUTING.md#bug-reports).
@ -22,7 +22,7 @@ To make a report, please email the private [cubefs-users@groups.io](mailto:cubef
## Security Vulnerability Response
Each report is acknowledged and analyzed by Product Security Committee members within 3 working days. This will set off the [Security Release Process](security-release-process.md).
Each report is acknowledged and analyzed by Product Security Committee members within 3 working days. This will set off the [Security Release Process](./security/security-release-process.md).
Any vulnerability information shared with Product Security Committee stays within CubeFS project and will not be disseminated to other projects unless it is necessary to get the issue fixed.