You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@hertzbeat.apache.org by go...@apache.org on 2024/12/04 14:33:59 UTC
(hertzbeat) 01/03: [doc] update security doc
This is an automated email from the ASF dual-hosted git repository.
gongchao pushed a commit to branch security-doc-update
in repository https://gitbox.apache.org/repos/asf/hertzbeat.git
commit d656fb0b4c6f71f9acb7e8a13ed4f9caae917ae8
Author: tomsun28 <to...@outlook.com>
AuthorDate: Wed Dec 4 14:49:23 2024 +0800
[doc] update security doc
Signed-off-by: tomsun28 <to...@outlook.com>
---
.github/ISSUE_TEMPLATE/feature-request.yml | 2 +-
.github/ISSUE_TEMPLATE/task.yml | 2 +-
.github/ISSUE_TEMPLATE/volunteer.yml | 2 +-
SECURITY.md | 12 +++++++++---
4 files changed, 12 insertions(+), 6 deletions(-)
diff --git a/.github/ISSUE_TEMPLATE/feature-request.yml b/.github/ISSUE_TEMPLATE/feature-request.yml
index cd38ef879..449584c61 100644
--- a/.github/ISSUE_TEMPLATE/feature-request.yml
+++ b/.github/ISSUE_TEMPLATE/feature-request.yml
@@ -53,4 +53,4 @@ body:
validations:
required: false
- type: markdown
- value: "Please read the [Contribution Guideline](https://hertzbeat.apache.org/docs/others/contributing) before submitting the PR"
+ value: "Please read the [Contribution Guideline](https://hertzbeat.apache.org/docs/community/contribution) before submitting the PR"
diff --git a/.github/ISSUE_TEMPLATE/task.yml b/.github/ISSUE_TEMPLATE/task.yml
index b22d923f7..4e46853ce 100644
--- a/.github/ISSUE_TEMPLATE/task.yml
+++ b/.github/ISSUE_TEMPLATE/task.yml
@@ -39,4 +39,4 @@ body:
- type: markdown
attributes:
value: |
- Please read the [Contribution Guideline](https://hertzbeat.com/docs/others/contributing/) before submitting the PR
+ Please read the [Contribution Guideline](https://hertzbeat.apache.org/docs/community/contribution) before submitting the PR
diff --git a/.github/ISSUE_TEMPLATE/volunteer.yml b/.github/ISSUE_TEMPLATE/volunteer.yml
index 75d58627f..2729f39b1 100644
--- a/.github/ISSUE_TEMPLATE/volunteer.yml
+++ b/.github/ISSUE_TEMPLATE/volunteer.yml
@@ -30,5 +30,5 @@ body:
- type: markdown
attributes:
value: |
- Please read the [Contribution Guideline](https://hertzbeat.apache.org/docs/others/contributing/) before submitting the PR
+ Please read the [Contribution Guideline](https://hertzbeat.apache.org/docs/community/contribution) before submitting the PR
diff --git a/SECURITY.md b/SECURITY.md
index effdf692b..c2377171e 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -1,6 +1,6 @@
# Security Policy
-**[Version Releases](https://github.com/apache/hertzbeat/releases)**
+Apache HertzBeat follows the [ASF vulnerability handling process](https://apache.org/security/#vulnerability-handling)
## Supported Versions
@@ -14,6 +14,12 @@ currently being supported with security updates.
## Reporting a Vulnerability
-Use this section to tell people how to report a vulnerability.
+Please do not file GitHub issues for security vulnerabilities as they are public!
-Please report vulnerability disclosures to `security@apache.org`.
+To report a new vulnerability you have discovered please follow the [ASF vulnerability reporting process](https://apache.org/security/#reporting-a-vulnerability).
+
+## Extra Information
+
+- [Apache HertzBeat Security Model](https://hertzbeat.apache.org/docs/help/security_model)
+- [ASF Security](https://www.apache.org/security/)
+- [Apache HertzBeat Document](https://hertzbeat.apache.org/docs/)
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@hertzbeat.apache.org
For additional commands, e-mail: notifications-help@hertzbeat.apache.org