Skip to content

Commit 941fe88

Browse files
Update SECURITY.md with vulnerability reporting details (#11745)
GitHub changed the UI for vulnerability reporting, so now going to `issues/new` and selecting `Report a security vulnerability` takes one to the `SECURITY.md` file without any UI for actually reporting anything. Hence, this PR changes the document to contain a link to the actual reporting form.
1 parent 62dfbd6 commit 941fe88

File tree

1 file changed

+7
-2
lines changed

1 file changed

+7
-2
lines changed

SECURITY.md

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,16 @@
11
# Security Policy
22

33
Please refer to the [Bytecode Alliance security
4-
policy](https://bytecodealliance.org/security) for details on how to report
5-
security issues in Wasmtime, our disclosure policy, and how to receive
4+
policy](https://bytecodealliance.org/security) for details on our disclosure policy and how to receive
65
notifications about security issues.
76

87
For classification of what is and what isn't a security issue please see our
98
[online
109
documentation](https://docs.wasmtime.dev/security-what-is-considered-a-security-vulnerability.html)
1110
on the subject.
11+
12+
## Reporting a Vulnerability
13+
14+
To report a vulnerability, navigate to the [security](https://github.com/bytecodealliance/wasmtime/security)
15+
tab and click the green `Report a Vulnerability` button, or use
16+
[this direct link](https://github.com/bytecodealliance/wasmtime/security/advisories/new) to the reporting form.

0 commit comments

Comments
 (0)