Add security vulnerabilities reporting process (kserve#2523)

Signed-off-by: Dan Sun <[email protected]> Signed-off-by: Dan Sun <[email protected]>
zillow · Nov 12, 2022 · 070b661 · 070b661
1 parent 1bdc1e3
commit 070b661
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,8 @@
+## Reporting a Vulnerability
+
+We strongly encourage you to report security vulnerabilities to
+our private security mailing list: [email protected] - first, before
+disclosing them in any public forums.
+
+This is a private mailing list where only active maintainers of the project are allowed to be the members of the group and receive reported
+security vulnerabilities, and the issues are treated as top priority.