buzz/config.yml at wpfleger/deterministic-agent-commit-identity - buzz - Gitea: Git with a cup of tea

jerry/buzz

mirror of https://github.com/block/buzz.git synced 2026-10-29 21:41:33 +00:00

Files

Jordan Mecom 02dc49f0e6 docs(security): route reports through private advisories (#6728 )

Routes security researchers to GitHub's private vulnerability reporting
workflow instead of a public issue or email-first disclosure.

- Makes the private advisory form the primary path in `SECURITY.md`,
with email retained as a fallback.
- Adds private-reporting links to the contributor guide, issue chooser,
and bug template.

Checked with `git diff --check`, Ruby YAML parsing, and confirmation
that private vulnerability reporting is enabled for `block/buzz`.

Signed-off-by: Jordan Mecom <jm@squareup.com>

2026-08-24 15:07:08 -07:00

6 lines

225 B

YAML

Raw Permalink Blame History

 blank_issues_enabled: true
 contact_links:
   - name: Report a security vulnerability
     url: https://github.com/block/buzz/security/advisories/new
     about: Report security vulnerabilities privately to the Buzz maintainers.