From 856de6d8db29dc852cc3c01b1ec760d7b540d1f6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Dariusz=20Rumi=C5=84ski?= Date: Wed, 4 Dec 2024 02:19:00 +0100 Subject: [PATCH 1/2] Create SECURITY.md --- .github/SECURITY.md | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 .github/SECURITY.md diff --git a/.github/SECURITY.md b/.github/SECURITY.md new file mode 100644 index 00000000..43444505 --- /dev/null +++ b/.github/SECURITY.md @@ -0,0 +1,5 @@ +# Security Policy + +To report a security issue, please use the GitHub Security Advisory ["Report a Vulnerability"](https://github.com/PHP-CS-Fixer/diff/security/advisories/new) tab. + +Report security bugs in third-party libraries to the person or team maintaining that library. From f919c261fca8fe7e4a1dcfad2777eabf86aaa47d Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Dariusz=20Rumi=C5=84ski?= Date: Mon, 12 May 2025 00:28:36 +0200 Subject: [PATCH 2/2] Update SECURITY.md --- .github/SECURITY.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/SECURITY.md b/.github/SECURITY.md index 43444505..10f0353f 100644 --- a/.github/SECURITY.md +++ b/.github/SECURITY.md @@ -1,5 +1,7 @@ # Security Policy -To report a security issue, please use the GitHub Security Advisory ["Report a Vulnerability"](https://github.com/PHP-CS-Fixer/diff/security/advisories/new) tab. +DO NOT PUBLISH SECURITY REPORTS PUBLICLY. -Report security bugs in third-party libraries to the person or team maintaining that library. +If you found any issues that might have security implications, please send a report to dariusz.ruminski+php-cs-fixer[at]gmail.com . + +Report security bugs in third-party libraries directly to the group maintaining that library.