Skip to content

Coordinated vulnerability disclosure#8652

Merged
jodygarnett merged 4 commits intomainfrom
coordinated-vulneraebility-exposure
Mar 31, 2025
Merged

Coordinated vulnerability disclosure#8652
jodygarnett merged 4 commits intomainfrom
coordinated-vulneraebility-exposure

Conversation

@jodygarnett
Copy link
Contributor

Update security policy for Coordinated vulnerability disclosure.

I thought we had covered this in response to Cyber Security Act, but apparently not yet.

Please see proposed text to note handling of CVE numbers and coordinated vulnerability disclosure policy. Idea is to give everyone a chance to update before public disclosure.

Checklist

  • I have read the contribution guidelines
  • Pull request provided for main branch, backports managed with label
  • Good housekeeping of code, cleaning up comments, tests, and documentation
  • Clean commit history broken into understandable chucks, avoiding big commits with hundreds of files, cautious of reformatting and whitespace changes
  • Clean commit messages, longer verbose messages are encouraged
  • API Changes are identified in commit messages
  • Testing provided for features or enhancements using automatic tests
  • User documentation provided for new features or enhancements in manual
  • Build documentation provided for development instructions in README.md files
  • Library management using pom.xml dependency management. Update build documentation with intended library use and library tutorials or documentation

Update security policy for Coordinated vulnerability disclosure.
@jodygarnett jodygarnett requested a review from ticheler February 11, 2025 22:55
@josegar74 josegar74 added this to the 4.4.7 milestone Feb 12, 2025
josegar74 and others added 3 commits February 13, 2025 09:02
Co-authored-by: joachimnielandt <joachim.nielandt@vlaanderen.be>
Co-authored-by: joachimnielandt <joachim.nielandt@vlaanderen.be>
Co-authored-by: joachimnielandt <joachim.nielandt@vlaanderen.be>
@sonarqubecloud
Copy link

@jodygarnett jodygarnett merged commit 74f9bab into main Mar 31, 2025
11 checks passed
@jodygarnett jodygarnett deleted the coordinated-vulneraebility-exposure branch March 31, 2025 21:07
jodygarnett added a commit to jodygarnett/core-geonetwork that referenced this pull request Mar 31, 2025
* Coordinated vulnerability disclosure 

Update security policy for Coordinated vulnerability disclosure.

* Update SECURITY.md

Co-authored-by: joachimnielandt <joachim.nielandt@vlaanderen.be>

* Update SECURITY.md

Co-authored-by: joachimnielandt <joachim.nielandt@vlaanderen.be>

* Update SECURITY.md

Co-authored-by: joachimnielandt <joachim.nielandt@vlaanderen.be>

---------

Co-authored-by: Jose García <josegar74@gmail.com>
Co-authored-by: joachimnielandt <joachim.nielandt@vlaanderen.be>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants