diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml index 73d2be7..3ba13e0 100644 --- a/.github/ISSUE_TEMPLATE/config.yml +++ b/.github/ISSUE_TEMPLATE/config.yml @@ -1,5 +1 @@ blank_issues_enabled: false -contact_links: - - name: Security vulnerability - url: https://github.com/AllenReder/paseo-github-workbench/security/advisories/new - about: Report security issues privately. Do not open a public issue. diff --git a/SECURITY.md b/SECURITY.md index b931f1f..c9e2310 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -7,13 +7,9 @@ Security fixes are applied to the latest version on the main branch. ## Reporting a vulnerability Please do not disclose vulnerabilities, credentials, private repository -contents, or local filesystem paths in a public issue. Use GitHub's private -vulnerability-reporting flow for this repository when available: - -https://github.com/AllenReder/paseo-github-workbench/security/advisories/new - -If that flow is unavailable, contact the repository maintainer through GitHub -before publishing details. +contents, or local filesystem paths in a public issue. A private reporting +channel is not currently available; contact the repository maintainer before +publishing sensitive details. ## Trust boundary