Commit Graph

13 Commits

Author SHA1 Message Date
Dirkjan Ochtman
cde2171bde Remove mention of Google Group from CONTRIBUTING 2025-06-16 11:58:16 +02:00
Carol (Nichols || Goulding)
97a2dc7583 Add some FAQ entries linking to security policies (#2010) 2024-07-09 18:54:53 -06:00
Alexis Mousset
cbf97de9b7 Add documentation for advisories licenses (#1761) 2023-08-28 15:52:35 +00:00
Alexis Mousset
5e0135f3ef Change CONTRIBUTING.md wording to make it usable outside of the repository context (#1402) 2022-08-31 14:54:31 -06:00
Vitaly Shukela
f6c6cd09c9 Update CONTRIBUTING.md (#1292)
Clarify file format for creating advisory.
Explicitly mention that there should be markdown text, not just the toml.
2022-08-01 15:22:38 -04:00
Philippe Ombredanne
f5505edb82 Correct typo and URL (#491)
Distributed Weakness filing went dark last year
Instead use, the official pages at mitre corp.

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
2020-11-21 08:03:50 -08:00
Alexis Mousset
6390fccb77 Advisories are now in markdown format (#479) 2020-11-11 10:10:46 -08:00
Vinzent Steinberg
ee840d4a4d Add some minimal guideline about GHSA (#347)
Fixes #345.
2020-08-01 11:43:50 -07:00
Ralf Jung
ae22eb47d2 CONTRIBUTING: mention soundness issues (#314) 2020-06-22 06:41:01 -07:00
Tony Arcieri
6890db2d53 CONTRIBUTING.md: Recommend yanking affected versions (closes #74)
This seems like the best advice we can give for now
2019-06-25 17:29:54 -07:00
Tony Arcieri
a5666efee1 CONTRIBUTING.md: Fix link to template
The anchor changed slightly
2018-08-25 07:36:28 -07:00
Tony Arcieri
0a4f0ee960 CONTRIBUTING.md: Fix link 2018-07-24 15:35:07 -07:00
Tony Arcieri
2505020c63 CONTRIBUTING.md: Vulnerability reporting instructions and criteria
This is long overdue! (see #25) It provides basic instructions for
filing advisories against the database, and also some guidelines
for what types of vulnerabilities qualify.
2018-07-23 13:44:47 -07:00