From aa8685d043b90b7d832bd1cc6556c875e7c476dc Mon Sep 17 00:00:00 2001 From: Matt Butcher <mbutcher@engineyard.com> Date: Thu, 23 Jun 2016 15:44:38 -0600 Subject: [PATCH] fix(CONTRIBUTING): add guidelines for security issues Closes #662 --- CONTRIBUTING.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 3e48e2b70..2d58d3460 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -2,6 +2,14 @@ The Kubernetes Helm project accepts contributions via GitHub pull requests. This document outlines the process to help get your contribution accepted. +## Reporting a Security Issue + +Most of the time, when you find a bug in Helm, it should be reported +using [GitHub issues](github.com/kubernetes/helm/issues). However, if +you are reporting a _security vulnerability_, please email a report to +[helm-security@deis.com](mailto:helm-security@deis.com). This will give +us a chance to try to fix the issue before it is exploited in the wild. + ## Contributor License Agreements We'd love to accept your patches! Before we can take them, we have to jump a couple of legal hurdles. -- GitLab