From 0f170ef4b3b99e03c64a176a7f672013868b5deb Mon Sep 17 00:00:00 2001 From: Eric Chiang Date: Mon, 14 May 2018 10:19:46 -0700 Subject: [PATCH] README.md: add security disclosure link --- README.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/README.md b/README.md index 31627a5e25f..ecdc9f64bee 100644 --- a/README.md +++ b/README.md @@ -150,6 +150,12 @@ See [CONTRIBUTING](CONTRIBUTING.md) for details on submitting patches and the co See [reporting bugs](Documentation/reporting_bugs.md) for details about reporting any issues. +## Reporting a security vulnerability + +Due to their public nature, GitHub and mailing lists are NOT appropriate places for reporting vulnerabilities. Please refer to CoreOS's [security disclosure][disclosure] process when reporting issues that may be security related. + +[disclosure]: https://coreos.com/security/disclosure/ + ### License etcd is under the Apache 2.0 license. See the [LICENSE](LICENSE) file for details.