Skip to content

Commit 7506277

Browse files
committed
Some more improvements
1 parent 41ff9ec commit 7506277

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

SECURITY.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ Please include as many details as needed to clearly qualify the issue:
2525

2626
a. **Rejection**: If the team rejects the report, detailed explanations will be provided by email or commenting on the relevant issue and the latter will be made public and closed as `Won't fix`.
2727

28-
b. **Acceptance**: If the team accepts the report, a CVE identifier will be requested through GitHub and a [private fork](https://docs.github.com/en/code-security/security-advisories/working-with-repository-security-advisories/collaborating-in-a-temporary-private-fork-to-resolve-a-repository-security-vulnerability) opened to work on a fix to the issue.
28+
b. **Acceptance**: If the team accepts the report, a CVE identifier will be requested through GitHub and a [private fork](https://docs.github.com/en/code-security/security-advisories/working-with-repository-security-advisories/collaborating-in-a-temporary-private-fork-to-resolve-a-repository-security-vulnerability) will be opened to work on a fix to the issue.
2929

3030
3. **Resolution**: The team works to resolve the vulnerability in a timely manner. The timeline for resolution will depend on the complexity and severity of the vulnerability, but we will strive to address critical vulnerabilities as quickly as possible.
3131

@@ -37,11 +37,11 @@ Please include as many details as needed to clearly qualify the issue:
3737

3838
b. **Fix**: When a fix is available and approved, it should be merged and made available as quickly as possible:
3939

40-
- All commits to the private repository are squashed into a single commit whose description _should not_ make any reference it relates to a security vulnerability
40+
- All commits to the private repository are squashed into a single commit whose description _should not_ make any reference that it relates to a security vulnerability
4141
- A new Pull Request is created with this single commit
4242
- This PR's review and merging is expedited as all the work has already been done
4343

44-
6. **Release**: The team creates and publishes a release that includes the fix
44+
6. **Release**: The team creates and publishes a release that includes the fix.
4545

4646
7. **Announcement**: Concomitant to the release announcement, the team announces the security vulnerability by making the GitHub issue public. This is the first point that any information regarding the vulnerability is made public.
4747

@@ -63,7 +63,7 @@ We will not pursue legal action against individuals who report security vulnerab
6363

6464
## Contact Information
6565

66-
To report a security vulnerability, please use [GitHub form](https://github.com/IntersectMBO/cardano-ledger/security/advisories/new). Should you experience any issues reporting via GitHub or have other questions, please contact [Security](security@intersectmbo.org).
66+
To report a security vulnerability, please use the [GitHub security advisory form](https://github.com/IntersectMBO/cardano-ledger/security/advisories/new). Should you experience any issues reporting via GitHub or have other questions, please contact [security@intersectmbo.org](mailto:security@intersectmbo.org).
6767

6868
## Revision of Policy
6969

0 commit comments

Comments
 (0)