rustsec/advisory-db
1
0
Fork 0
mirror of https://github.com/rustsec/advisory-db.git synced 2026-07-16 00:12:29 -04:00
Code Issues Packages Projects Releases Wiki Activity

Add some FAQ entries linking to security policies (#2010)

Browse Source
This commit is contained in:
Carol (Nichols || Goulding)
2024-07-09 20:54:53 -04:00
committed by GitHub
parent 502a1ba737
commit 97a2dc7583
1 changed files with 13 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
CONTRIBUTING.md
View File

@@ -69,6 +69,19 @@ A: We do not presently handle embargoed vulnerabilities. Please ensure embargoes
have been lifted and details have been disclosed to the public prior to filing
them against RustSec.
**Q: Is this where I report a vulnerability in `rustc`?**
A: No, for official Rust projects, please see the [Rust Security Policy](https://www.rust-lang.org/policies/security) and follow the guidelines there.
**Q: Is this where I report intentionally malicious code or malware present on crates.io?**
A: No, please see the [Crates.io Security Policy](https://crates.io/policies/security) to get content violating crates.io's policies taken down.
**Q: I'm a crate author and someone reported a vulnerability in my crate to me. Can you help me?**
A: The Rust Foundation has resources that can help handle Rust ecosystem security issues.
Please see the [Ecosystem security help for crate authors](https://crates.io/policies/security#ecosystem-security-help) section of the crates.io security policy.
[Pull Request]: https://github.com/RustSec/advisory-db/pulls
[TOML advisory template]: https://github.com/RustSec/advisory-db#advisory-format
[Yank]: https://doc.rust-lang.org/cargo/commands/cargo-yank.html