From 405d303b49fa1330b00e9f456f9ea17622b60ef6 Mon Sep 17 00:00:00 2001 From: Luigi Gubello Date: Thu, 25 Jun 2020 12:31:40 +0200 Subject: [PATCH 1/2] Adding security policy link --- README.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/README.md b/README.md index 6f1e78c4fd9..eaef511a696 100644 --- a/README.md +++ b/README.md @@ -34,6 +34,14 @@ the source code, run the tests, and contribute your changes to the project. :sparkles: Thanks to all our [contributors]! :sparkles: +## Security + +If you think you found a vulnerability or a critical bug in the Arduino CLI, +please read our [security policy] and report the bug to our +Security Team 🛡️ Thank you! + +e-mail contact: security@arduino.cc + [tests-badge]: https://github.com/Arduino/arduino-cli/workflows/test/badge.svg [nightly-badge]: https://github.com/Arduino/arduino-cli/workflows/nightly/badge.svg @@ -46,3 +54,4 @@ the source code, run the tests, and contribute your changes to the project. [FAQ]: https://arduino.github.io/arduino-cli/FAQ/ [How to contribute]: https://arduino.github.io/arduino-cli/CONTRIBUTING/ [contributors]: https://github.com/arduino/arduino-cli/graphs/contributors +[security policy]: https://github.com/arduino/arduino-cli/security/policy From f4d36979e665e52a67d2be6bfc8e2975d292ff4e Mon Sep 17 00:00:00 2001 From: per1234 Date: Thu, 25 Jun 2020 05:20:41 -0700 Subject: [PATCH 2/2] Clarify that only security-related bugs should be reported to the security email --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index eaef511a696..54208a09452 100644 --- a/README.md +++ b/README.md @@ -36,8 +36,8 @@ the source code, run the tests, and contribute your changes to the project. ## Security -If you think you found a vulnerability or a critical bug in the Arduino CLI, -please read our [security policy] and report the bug to our +If you think you found a vulnerability or other security-related bug in the +Arduino CLI, please read our [security policy] and report the bug to our Security Team 🛡️ Thank you! e-mail contact: security@arduino.cc