Skip to content

Latest commit

 

History

History
29 lines (19 loc) · 1.38 KB

SECURITY.md

File metadata and controls

29 lines (19 loc) · 1.38 KB

Security and Disclosure Information Policy for the NRI Plugins Project

Reporting a Vulnerability

If you think you've identified a security issue in a NRI Plugins project, please DO NOT report the issue publicly via the Github issue tracker, mailing list, or IRC. Instead, send an email with as many details as possible to [email protected] or [email protected].

Please do not create a public issue.

Security Announcements

The [email protected] email list is used for messages about plugins security announcements as well as general announcements and discussions.

Security Vulnerability Response

Each report is acknowledged and analyzed by the core maintainers within 3 working days.

Any vulnerability information shared with core maintainers stays within the project and will not be disseminated to other projects unless it is necessary to get the issue fixed.

As the security issue moves from triage, to an identified fix, to release planning, the core maintainers will keep the reporter updated.