From 5b953b64e769e3c7a87220d44457017e64d72f8f Mon Sep 17 00:00:00 2001 From: Stephanie Anderson Date: Tue, 30 Jan 2024 13:00:09 +0100 Subject: [PATCH 1/2] Update README.md Mention bug bounty program in our README --- README.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/README.md b/README.md index e1f87e04a07a..143da0220ff8 100644 --- a/README.md +++ b/README.md @@ -32,6 +32,7 @@ convenient interface and improved consistency between various JavaScript environ - [Supported Platforms](#supported-platforms) - [Installation and Usage](#installation-and-usage) - [Other Packages](#other-packages) +- [Bug Bounty Program](#bug-bounty-program) ## Supported Platforms @@ -104,3 +105,12 @@ below: utility functions useful for various SDKs. - [`@sentry/types`](https://github.com/getsentry/sentry-javascript/tree/master/packages/types): Types used in all packages. + +## Bug Bounty Program + +We're excited to announce the expansion of our bug bounty program to include our SDK repositories. This program aims to improve the security of our open source projects by encouraging the community to identify and report potential security vulnerabilities. Your reward will depend on the severity of the identified vulnerability. + +Our program is currently running on an invitation basis. If you're interested in participating, please send us an email to security@sentry.io and tell us, that you are interested in auditing this repository. + +For more details, please have a look at https://sentry.io/security/#vulnerability-disclosure. + From 689646c3d45f10c27e5c4cf2f316496c54c88d9e Mon Sep 17 00:00:00 2001 From: Stephanie Anderson Date: Tue, 30 Jan 2024 14:44:40 +0100 Subject: [PATCH 2/2] Update README.md Co-authored-by: Luca Forstner --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 143da0220ff8..b167b682655c 100644 --- a/README.md +++ b/README.md @@ -108,7 +108,7 @@ below: ## Bug Bounty Program -We're excited to announce the expansion of our bug bounty program to include our SDK repositories. This program aims to improve the security of our open source projects by encouraging the community to identify and report potential security vulnerabilities. Your reward will depend on the severity of the identified vulnerability. +Our bug bounty program aims to improve the security of our open source projects by encouraging the community to identify and report potential security vulnerabilities. Your reward will depend on the severity of the identified vulnerability. Our program is currently running on an invitation basis. If you're interested in participating, please send us an email to security@sentry.io and tell us, that you are interested in auditing this repository.