From b1a7161ccc4c410256928a6ae50c593db55151b0 Mon Sep 17 00:00:00 2001 From: Jeremy Katz Date: Thu, 15 Oct 2020 10:39:54 -0400 Subject: [PATCH] Add information on reporting security issues Signed-off-by: Jeremy Katz --- .github/SECURITY.md | 5 +++++ README.md | 5 +++++ 2 files changed, 10 insertions(+) create mode 100644 .github/SECURITY.md diff --git a/.github/SECURITY.md b/.github/SECURITY.md new file mode 100644 index 0000000000..efe7a2cbc1 --- /dev/null +++ b/.github/SECURITY.md @@ -0,0 +1,5 @@ +# Security + +Rancher Labs supports responsible disclosure and endeavors to resolve security +issues in a reasonable timeframe. To report a security vulnerability, email +[security@rancher.com](mailto:security@rancher.com) diff --git a/README.md b/README.md index 8ad23359e7..334dc4bac0 100644 --- a/README.md +++ b/README.md @@ -145,3 +145,8 @@ Contributing ------------ Please check out our [contributing guide](CONTRIBUTING.md) if you're interesting in contributing to k3s. + +Security +-------- + +Security issues in k3s can be reported by sending an email to [security@rancher.com](mailto:security@rancher.com). Please do not file issues about security issues.