Merge pull request #9724 from ericchiang/security-disclosure

README.md: add security disclosure link
etcd-io · May 14, 2018 · 0a8dd44 · 0a8dd44
2 parents 67b1ff6 + 0f170ef
commit 0a8dd44
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -150,6 +150,12 @@ See [CONTRIBUTING](CONTRIBUTING.md) for details on submitting patches and the co
 
 See [reporting bugs](Documentation/reporting_bugs.md) for details about reporting any issues.
 
+## Reporting a security vulnerability
+
+Due to their public nature, GitHub and mailing lists are NOT appropriate places for reporting vulnerabilities. Please refer to CoreOS's [security disclosure][disclosure] process when reporting issues that may be security related.
+
+[disclosure]: https://coreos.com/security/disclosure/
+
 ### License
 
 etcd is under the Apache 2.0 license. See the [LICENSE](LICENSE) file for details.