From a1a533d15349ba457178a5b24caaef9e6e2b086d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Andr=C3=A9s=20Correa=20Casablanca?= Date: Mon, 12 Feb 2024 10:01:45 +0100 Subject: [PATCH] docs: improve security policy document MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Andrés Correa Casablanca --- SECURITY.md | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index 0e71379..a425ecf 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -2,7 +2,6 @@ ## Supported Versions --------------------------------------------------------------------------------- Although we can't guarantee API stability (yet), we take every security report very seriously, and we'll do everything in our hand to respond as promptly as possible. @@ -14,4 +13,9 @@ possible. ## Reporting a Vulnerability You can report security vulnerabilities through our -[Security section](https://github.com/KindSpells/astro-sri-csp/security). +[Security Advisories section](https://github.com/KindSpells/astro-sri-csp/security/advisories). + +If you want to learn more on how to report vulnerabilities, you can check these +resources: +- [Github: Privately reporting a security vulnerability](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing-information-about-vulnerabilities/privately-reporting-a-security-vulnerability) +- [OWASP's Vulnerability Disclosure Cheatsheet](https://cheatsheetseries.owasp.org/cheatsheets/Vulnerability_Disclosure_Cheat_Sheet.html)