-
Notifications
You must be signed in to change notification settings - Fork 41.4k
Add GitHub Issue templates #42770
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add GitHub Issue templates #42770
Conversation
SECURITY.md
Outdated
# Reporting a Vulnerability | ||
|
||
Please, [open a draft security advisory](https://github.com/spring-projects/security-advisories/security/advisories/new) if you need to disclose and discuss a security issue in private with the Spring Boot team. Note that we only accept reports against [supported versions](https://spring.io/projects/spring-boot#support). | ||
|
||
For more details, check out our [security policy](https://spring.io/security-policy). |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I don't think we need this as we already inherit the policy from spring-projects/.github. We can just link to https://github.com/spring-projects/spring-boot/security/policy.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Report a security vulnerability option should be inherited from https://github.com/spring-projects/.github automatically.
fe4bad1
to
cf3c1e3
Compare
@mhalbritter Is it possible to do something similar in the Spring Boot repository? If so, I could remove the link from |
cf3c1e3
to
14472ef
Compare
We recently applied this in Spring Framework because we had several security reports made public as issues. I'm not sure we have the same problem in the Spring Boot repository at this point. Also about the issue type, its title is "Issue" which renders as "Issue: Issue" in the GitHub UI. See https://github.com/spring-projects/spring-framework/issues/new?assignees=&labels=&projects=&template=issue.md&title= |
Thank you, @snicoll ![]() |
If you think it's a good idea, it might be worth considering adding templates for PRs.