Trying to get in touch with you regarding a security issue

[JamieSlome]

Hi there,

I couldn't find a SECURITY.md in your repository and so am not sure how to best contact you privately to disclose the security issue.

Can you add a SECURITY.md file with your e-mail to your repository, so that I know who to contact? GitHub suggests that a security policy is the best way to make sure security issues are responsibly disclosed.

Once you've done that, please let me know so I can ping you the info.

Thanks! (cc @JamieSlome)

[canxin0523]

Could you speak Chinese? At 2021-07-08 01:44:00, "Jamie Slome" ***@***.***> wrote: Hi there, I couldn't find a SECURITY.md in your repository and so am not sure how to best contact you privately to disclose the security issue. Can you add a SECURITY.md file with your e-mail to your repository, so that I know who to contact? GitHub suggests that a security policy is the best way to make sure security issues are responsibly disclosed. Once you've done that, please let me know so I can ping you the info. Thanks! (cc @JamieSlome) — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or unsubscribe.

[JamieSlome]

@zidingz - just (cc) you here ❤️

[zidingz]

可以! 我给你翻译一下吧。

你好，我在你的repository里面找不到 SECURITY.md的文件，所以我不确定如何私下联系你去纰漏这个安全问题?
在你的repository，你可以你将Email 放到SECURITY.md 文件里面吗？这样我就知道要联系谁了，GitHub建议有安全政策是负责任的纰漏安全问题的最好办法

你做完可以告诉我，我会发信息给你