diff --git a/README.md b/README.md index e929f55..79d20e2 100644 --- a/README.md +++ b/README.md @@ -283,3 +283,8 @@ help unexpected It contains information about differences between C and calc that may surprise C programmers. + + +# Reporting Security Issues + +To report a security issue, please visit "[Reporting Security Issues](https://github.com/lcn2/calc/security/policy)". diff --git a/SECURITY.md b/SECURITY.md index 95ef13a..2bb79a5 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -1,4 +1,16 @@ -# Security Policy +# Reporting Security Issues + +We take security bugs seriously. We appreciate your efforts to responsibly +disclose your findings, and will make every effort to acknowledge your +contributions for any verified security issues when they have been fixed. + +To report a security issue, click on: "[Open a draft security advisory](https://github.com/lcn2/calc/security/advisories/new)" + +We will send a response indicating the next steps in handling your +report. After the initial reply to your report, we will keep you informed +of the progress towards a fix and full announcement, and may ask for +additional information or guidance. + ## Supported Versions @@ -9,11 +21,3 @@ If the most recent stable of calc is also supported with security updates. FYI: please review the BUGS file, or enter the calc command: ; help BUGS - -## Reporting a Vulnerability - -Please create a calc GitHub repo issue: - - https://github.com/lcn2/calc/issues - -Click on ((New issue)) and follow the issue template.