From a0c79b35c82cbcd317dfdd05cba7b248bf6d75b6 Mon Sep 17 00:00:00 2001 From: HDVinnie Date: Thu, 9 Dec 2021 10:23:00 -0500 Subject: [PATCH 1/4] create: security.md --- SECURITY.md | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 000000000..165aae598 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,3 @@ +## Reporting a Vulnerability + +If you discover any security related issues, please email security@laravel.io instead of using the issue tracker. From 14ec98d7d22d384cb3ba598a8778d51eb2bc2051 Mon Sep 17 00:00:00 2001 From: Dries Vints Date: Mon, 13 Dec 2021 09:16:12 +0100 Subject: [PATCH 2/4] Update SECURITY.md --- SECURITY.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index 165aae598..cc5faeac8 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -1,3 +1,5 @@ -## Reporting a Vulnerability +# Reporting a Vulnerability -If you discover any security related issues, please email security@laravel.io instead of using the issue tracker. +**PLEASE DON'T DISCLOSE SECURITY-RELATED ISSUES PUBLICLY.** + +If you discover any security related issues, please email hello@laravel.io instead of using the issue tracker. From 50d36861796e3b538f8c85f5709d3150c3ac5c19 Mon Sep 17 00:00:00 2001 From: Dries Vints Date: Mon, 13 Dec 2021 09:17:05 +0100 Subject: [PATCH 3/4] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 3d99a8fbe..c3ff8a847 100644 --- a/README.md +++ b/README.md @@ -127,7 +127,7 @@ Please read our [Code of Conduct](CODE_OF_CONDUCT.md) before contributing or eng ## Security Vulnerabilities -If you discover a security vulnerability within Laravel.io, please send an email immediately to [security@laravel.io](mailto:security@laravel.io). **Do not create an issue for the vulnerability.** +Please review [our security policy](.github/SECURITY.md) on how to report security vulnerabilities. ## License From c696a219f118a58274ee08fac65f69fae2d16809 Mon Sep 17 00:00:00 2001 From: Dries Vints Date: Mon, 13 Dec 2021 09:17:26 +0100 Subject: [PATCH 4/4] Rename SECURITY.md to .github/SECURITY.md --- SECURITY.md => .github/SECURITY.md | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename SECURITY.md => .github/SECURITY.md (100%) diff --git a/SECURITY.md b/.github/SECURITY.md similarity index 100% rename from SECURITY.md rename to .github/SECURITY.md