Refer to disclosure policy in CONTRIBUTING.md

Jacob Vosmaer
1 parent ff7073ac
Showing 1 changed file with 4 additions and 0 deletions Show diff stats
CONTRIBUTING.md
@@ -5,6 +5,7 @@ This guide details how to use issues and pull requests to improve GitLab.
 -  [Closing policy for issues and pull requests](#closing-policy-for-issues-and-pull-requests)
 -  [Issue tracker](#issue-tracker)
 -  [Pull requests](#pull-requests)
+-  [Security vulnerabilities](#security-vulnerabilities)
  
 If you want to know how the GitLab team handles contributions have a look at [the GitLab contributing process](PROCESS.md).
  
@@ -73,3 +74,6 @@ We will accept pull requests if:
 * It is a single commit (please use `git rebase -i` to squash commits)
  
 For examples of feedback on pull requests please look at already [closed pull requests](https://github.com/gitlabhq/gitlabhq/pulls?direction=desc&page=1&sort=created&state=closed).
+
+## Security vulnerabilities
+Please report security vulnerabilities in private to support@gitlab.com; also see http://www.gitlab.com/disclosure/. Do NOT create GitHub issues for security vulnerabilities.
...	...	@@ -5,6 +5,7 @@ This guide details how to use issues and pull requests to improve GitLab.
5	5	- [Closing policy for issues and pull requests](#closing-policy-for-issues-and-pull-requests)
6	6	- [Issue tracker](#issue-tracker)
7	7	- [Pull requests](#pull-requests)
	8	+- [Security vulnerabilities](#security-vulnerabilities)
8	9
9	10	If you want to know how the GitLab team handles contributions have a look at [the GitLab contributing process](PROCESS.md).
10	11
...	...	@@ -73,3 +74,6 @@ We will accept pull requests if:
73	74	* It is a single commit (please use `git rebase -i` to squash commits)
74	75
75	76	For examples of feedback on pull requests please look at already [closed pull requests](https://github.com/gitlabhq/gitlabhq/pulls?direction=desc&page=1&sort=created&state=closed).
	77	+
	78	+## Security vulnerabilities
	79	+Please report security vulnerabilities in private to support@gitlab.com; also see http://www.gitlab.com/disclosure/. Do NOT create GitHub issues for security vulnerabilities.
...	...