Jordan Mecom 02dc49f0e6 docs(security): route reports through private advisories (#6728) ...

Routes security researchers to GitHub's private vulnerability reporting
workflow instead of a public issue or email-first disclosure.

- Makes the private advisory form the primary path in `SECURITY.md`,
with email retained as a fallback.
- Adds private-reporting links to the contributor guide, issue chooser,
and bug template.

Checked with `git diff --check`, Ruby YAML parsing, and confirmation
that private vulnerability reporting is enabled for `block/buzz`.

Signed-off-by: Jordan Mecom <jm@squareup.com>

2026-08-24 15:07:08 -07:00

..

ISSUE_TEMPLATE

docs(security): route reports through private advisories (#6728)

2026-08-24 15:07:08 -07:00

workflows

chore(deps): update ubuntu:24.04 docker digest to 561618e (#5442)

2026-08-21 18:27:17 -06:00

CODEOWNERS

chore: cleanup CODEOWNERS comment

2026-07-09 12:16:51 -04:00

PULL_REQUEST_TEMPLATE.md

docs(contributing): set PR expectations and require UI screenshots (#3140)

2026-07-27 11:57:09 -04:00