mirror of
https://github.com/block/buzz.git
synced 2026-10-30 05:51:46 +00:00
02dc49f0e6
Routes security researchers to GitHub's private vulnerability reporting workflow instead of a public issue or email-first disclosure. - Makes the private advisory form the primary path in `SECURITY.md`, with email retained as a fallback. - Adds private-reporting links to the contributor guide, issue chooser, and bug template. Checked with `git diff --check`, Ruby YAML parsing, and confirmation that private vulnerability reporting is enabled for `block/buzz`. Signed-off-by: Jordan Mecom <jm@squareup.com>
29 lines
713 B
Markdown
29 lines
713 B
Markdown
---
|
|
name: Bug report
|
|
about: Report a reproducible bug in Buzz
|
|
labels: bug
|
|
---
|
|
|
|
> [!IMPORTANT]
|
|
> Do not include security vulnerabilities in a public issue. [Report them
|
|
> privately through a GitHub security advisory](https://github.com/block/buzz/security/advisories/new).
|
|
|
|
**Describe the bug**
|
|
A clear and concise description of what the bug is.
|
|
|
|
**Steps to reproduce**
|
|
1. Go to '...'
|
|
2. Click on '...'
|
|
3. See error
|
|
|
|
**Expected behavior**
|
|
What did you expect to happen?
|
|
|
|
**Version and platform**
|
|
Find your version at the bottom of the Settings sidebar. Write "unknown" if you can't determine it.
|
|
- Buzz version:
|
|
- OS:
|
|
|
|
**Logs / additional context**
|
|
Paste any relevant logs, error messages, or screenshots here.
|