Jordan Mecom 02dc49f0e6 docs(security): route reports through private advisories (#6728) ...

Routes security researchers to GitHub's private vulnerability reporting
workflow instead of a public issue or email-first disclosure.

- Makes the private advisory form the primary path in `SECURITY.md`,
with email retained as a fallback.
- Adds private-reporting links to the contributor guide, issue chooser,
and bug template.

Checked with `git diff --check`, Ruby YAML parsing, and confirmation
that private vulnerability reporting is enabled for `block/buzz`.

Signed-off-by: Jordan Mecom <jm@squareup.com>

2026-08-24 15:07:08 -07:00

..

bug-report.md

docs(security): route reports through private advisories (#6728)

2026-08-24 15:07:08 -07:00

config.yml

docs(security): route reports through private advisories (#6728)

2026-08-24 15:07:08 -07:00

feature-request.md

docs(contributing): trim to goose-scale minimal intake surface (#2780)

2026-07-25 14:01:28 -04:00