diff --git a/SECURITY.md b/SECURITY.md index 0e71379..a425ecf 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -2,7 +2,6 @@ ## Supported Versions --------------------------------------------------------------------------------- Although we can't guarantee API stability (yet), we take every security report very seriously, and we'll do everything in our hand to respond as promptly as possible. @@ -14,4 +13,9 @@ possible. ## Reporting a Vulnerability You can report security vulnerabilities through our -[Security section](https://github.com/KindSpells/astro-sri-csp/security). +[Security Advisories section](https://github.com/KindSpells/astro-sri-csp/security/advisories). + +If you want to learn more on how to report vulnerabilities, you can check these +resources: +- [Github: Privately reporting a security vulnerability](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing-information-about-vulnerabilities/privately-reporting-a-security-vulnerability) +- [OWASP's Vulnerability Disclosure Cheatsheet](https://cheatsheetseries.owasp.org/cheatsheets/Vulnerability_Disclosure_Cheat_Sheet.html)