diff --git a/SECURITY.md b/SECURITY.md index e59bafc6..daa1d629 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -2,6 +2,11 @@ ## Reporting a Vulnerability -Any security vulnerability can be reported at the project [JIRA](https://issues.redhat.com/projects/WELD). -When creating the issue, there is a special tick box to mark the issue as security sensitive so make sure to select it: -- [x] `This issue is security relevant` +To report a security vulnerability, please use [GitHub Security Advisories](https://github.com/weld/api/security/advisories/new). + +1. Navigate to the **Security** tab of this repository +2. Click **"Report a vulnerability"** +3. Fill in the details — title, description, severity, and affected versions +4. Submit the report + +Your report will be created as a **private advisory**, visible only to you and the repository maintainers. We will review it and work with you to coordinate a fix before any public disclosure. diff --git a/pom.xml b/pom.xml index 570926ee..0feb1309 100644 --- a/pom.xml +++ b/pom.xml @@ -26,8 +26,8 @@ - JIRA - http://jira.jboss.org/browse/WELD + GitHub Issues + https://github.com/weld/api/issues 2008