Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update SECURITY.md #10638

Merged
merged 4 commits into from
Dec 1, 2021
Merged

Update SECURITY.md #10638

merged 4 commits into from
Dec 1, 2021

Conversation

okwme
Copy link
Contributor

@okwme okwme commented Nov 29, 2021

Description

Closes: #XXXX


Author Checklist

All items are required. Please add a note to the item if the item is not applicable and
please add links to any relevant follow up issues.

I have...

  • included the correct type prefix in the PR title
  • added ! to the type prefix if API or client breaking change
  • targeted the correct branch (see PR Targeting)
  • provided a link to the relevant issue or specification
  • followed the guidelines for building modules
  • included the necessary unit and integration tests
  • added a changelog entry to CHANGELOG.md
  • included comments for documenting Go code
  • updated the relevant documentation or specification
  • reviewed "Files changed" and left comments if necessary
  • confirmed all CI checks have passed

Reviewers Checklist

All items are required. Please add a note if the item is not applicable and please add
your handle next to the items reviewed if you only reviewed selected items.

I have...

  • confirmed the correct type prefix in the PR title
  • confirmed ! in the type prefix if API or client breaking change
  • confirmed all author checklist items have been addressed
  • reviewed state machine logic
  • reviewed API design and naming
  • reviewed documentation is accurate
  • reviewed tests and test coverage
  • manually tested (if applicable)

@@ -1,7 +1,7 @@
# Security

> **IMPORTANT**: If you find a security issue, you can contact our team directly at
[email protected], or report it to our [bug bounty program](https://hackerone.com/tendermint) on HackerOne. *DO NOT* open a public issue on the repository.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

do we want to start using [email protected]?

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would turn down the email usage and use only the hackerone. It's more manageable with access etc...

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes I agree with @robert-zaremba using the Hackerone channel only is better. [email protected] is also used for various other purposes.

@tac0turtle tac0turtle added the A:automerge Automatically merge PR once all prerequisites pass. label Dec 1, 2021
@tac0turtle tac0turtle merged commit 06fd69c into master Dec 1, 2021
@tac0turtle tac0turtle deleted the okwme-patch-2 branch December 1, 2021 15:12
blewater pushed a commit to e-money/cosmos-sdk that referenced this pull request Dec 8, 2021
* Update SECURITY.md

* Update SECURITY.md

* Update SECURITY.md

Co-authored-by: Marko <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
A:automerge Automatically merge PR once all prerequisites pass.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants