-
-
Notifications
You must be signed in to change notification settings - Fork 5.7k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Enhance security issue template (#5593)
- Loading branch information
1 parent
784ac9c
commit 44f5a89
Showing
3 changed files
with
47 additions
and
17 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,2 @@ | ||
--- | ||
blank_issues_enabled: false |
This file was deleted.
Oops, something went wrong.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,45 @@ | ||
--- | ||
name: "🛡️ Security Issue" | ||
description: | | ||
Notify Louis Lam about a security concern. Please do NOT include any sensitive details in this issue. | ||
# title: "Security Issue" | ||
labels: [security] | ||
assignees: [louislam] | ||
body: | ||
- type: "markdown" | ||
attributes: | ||
value: | | ||
## **⚠️ Report a Security Vulnerability** | ||
### **IMPORTANT: DO NOT SHARE VULNERABILITY DETAILS HERE** | ||
If you have discovered a security vulnerability, please report it securely using the GitHub Security Advisory. | ||
**Note**: This issue is only for notifying the maintainers of the repository, as the GitHub Security Advisory does not automatically send notifications. | ||
- **Confidentiality**: The information you provide in the GitHub Security Advisory will initially remain confidential. However, once the vulnerability is addressed, the advisory will be publicly disclosed on GitHub. | ||
- **Access and Visibility**: Until the advisory is published, it will only be visible to the maintainers of the repository and invited collaborators. | ||
- **Credit**: You will be automatically credited as a contributor for identifying and reporting the vulnerability. Your contribution will be reflected in the MITRE Credit System. | ||
- **Important Reminder**: **Do not include any sensitive or detailed vulnerability information in this issue.** This issue is only for sharing the advisory URL to notify the maintainers of the repository, not for discussing the vulnerability itself. | ||
**Thank you for helping us keep Uptime Kuma secure!** | ||
## **Step 1: Submit a GitHub Security Advisory** | ||
Right-click the link below and select `Open link in new tab` to access the page. This will keep the security issue open, allowing you to easily return and paste the Advisory URL here later. | ||
➡️ [Create a New Security Advisory](https://github.com/louislam/uptime-kuma/security/advisories/new) | ||
## **Step 2: Share the Advisory URL** | ||
Once you've created your advisory, please share the URL below. This will notify @louislam and enable them to take the appropriate action. | ||
- type: "textarea" | ||
id: github-advisory-url | ||
validations: | ||
required: true | ||
attributes: | ||
label: "GitHub Advisory URL" | ||
placeholder: | | ||
Paste the GitHub Advisory URL here. | ||
Example: https://github.com/louislam/uptime-kuma/security/advisories/GHSA-8h5r-7t6l-q3kz |