You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by "pierrejeambrun (via GitHub)" <gi...@apache.org> on 2023/09/17 16:41:57 UTC
[GitHub] [airflow] pierrejeambrun opened a new pull request, #34439: Update SECURITY.md
pierrejeambrun opened a new pull request, #34439:
URL: https://github.com/apache/airflow/pull/34439
Redirect reporters to the airflow-s fork with Private Vulnerability Reporting
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Update SECURITY.md [airflow]
Posted by "pierrejeambrun (via GitHub)" <gi...@apache.org>.
pierrejeambrun closed pull request #34439: Update SECURITY.md
URL: https://github.com/apache/airflow/pull/34439
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Update SECURITY.md [airflow]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on PR #34439:
URL: https://github.com/apache/airflow/pull/34439#issuecomment-1863642552
This pull request has been automatically marked as stale because it has not had recent activity. It will be closed in 5 days if no further activity occurs. Thank you for your contributions.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] pierrejeambrun commented on pull request #34439: Update SECURITY.md
Posted by "pierrejeambrun (via GitHub)" <gi...@apache.org>.
pierrejeambrun commented on PR #34439:
URL: https://github.com/apache/airflow/pull/34439#issuecomment-1722546534
Converting to draft following Jed comments. Will update if the experiement is succesfull and that Private Vulnerability Reporting is enabled on apache/airflow
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Update SECURITY.md [airflow]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on PR #34439:
URL: https://github.com/apache/airflow/pull/34439#issuecomment-1789860879
This pull request has been automatically marked as stale because it has not had recent activity. It will be closed in 5 days if no further activity occurs. Thank you for your contributions.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Update SECURITY.md [airflow]
Posted by "pierrejeambrun (via GitHub)" <gi...@apache.org>.
pierrejeambrun commented on PR #34439:
URL: https://github.com/apache/airflow/pull/34439#issuecomment-1792349515
up
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] pierrejeambrun commented on a diff in pull request #34439: Update SECURITY.md
Posted by "pierrejeambrun (via GitHub)" <gi...@apache.org>.
pierrejeambrun commented on code in PR #34439:
URL: https://github.com/apache/airflow/pull/34439#discussion_r1328118059
##########
.github/SECURITY.md:
##########
@@ -29,15 +29,13 @@ to learn more, head to the
The Apache Software Foundation takes security issues very seriously. Apache
Airflow specifically offers security features and is responsive to issues
around its features. If you have any concern around Airflow Security or believe
-you have uncovered a vulnerability, we suggest that you get in touch via the
-e-mail address [security@airflow.apache.org](mailto:security@airflow.apache.org).
+you have uncovered a vulnerability, we suggest that you privately report it by using the [vulnerability reporting form](https://github.com/airflow-s/airflow/security/advisories/new).
Review Comment:
In order to test things I figured we need people to use that new way of reporting, and redirecting them would be a good start.
We can also redirect when we receive emails at security@airflow.apache.org/private@airflow.apache.org
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] hussein-awala commented on a diff in pull request #34439: Update SECURITY.md
Posted by "hussein-awala (via GitHub)" <gi...@apache.org>.
hussein-awala commented on code in PR #34439:
URL: https://github.com/apache/airflow/pull/34439#discussion_r1328117375
##########
.github/SECURITY.md:
##########
@@ -29,15 +29,13 @@ to learn more, head to the
The Apache Software Foundation takes security issues very seriously. Apache
Airflow specifically offers security features and is responsive to issues
around its features. If you have any concern around Airflow Security or believe
-you have uncovered a vulnerability, we suggest that you get in touch via the
-e-mail address [security@airflow.apache.org](mailto:security@airflow.apache.org).
+you have uncovered a vulnerability, we suggest that you privately report it by using the [vulnerability reporting form](https://github.com/airflow-s/airflow/security/advisories/new).
Review Comment:
But yeah, I think it's better to keep everything related to the security there.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [airflow] hussein-awala commented on a diff in pull request #34439: Update SECURITY.md
Posted by "hussein-awala (via GitHub)" <gi...@apache.org>.
hussein-awala commented on code in PR #34439:
URL: https://github.com/apache/airflow/pull/34439#discussion_r1328117053
##########
.github/SECURITY.md:
##########
@@ -29,15 +29,13 @@ to learn more, head to the
The Apache Software Foundation takes security issues very seriously. Apache
Airflow specifically offers security features and is responsive to issues
around its features. If you have any concern around Airflow Security or believe
-you have uncovered a vulnerability, we suggest that you get in touch via the
-e-mail address [security@airflow.apache.org](mailto:security@airflow.apache.org).
+you have uncovered a vulnerability, we suggest that you privately report it by using the [vulnerability reporting form](https://github.com/airflow-s/airflow/security/advisories/new).
Review Comment:
I thought that the other fork was just for testing
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org