From 8f062976b619058e5d373b557e794cf33dfcda66 Mon Sep 17 00:00:00 2001 From: dennis zhuang Date: Thu, 8 Oct 2026 02:40:26 +0000 Subject: [PATCH] docs: point vulnerability reports to GitHub private reporting (#9459) --- SECURITY.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index ebb11e93c55..72029c7beb7 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -14,6 +14,9 @@ and cloud platform. If you come across a security vulnerability in GreptimeDB, we kindly request that you inform us immediately. We will thoroughly investigate all valid reports and make every effort to resolve the issue promptly. -To report any issues or vulnerabilities, please email us at info@greptime.com, rather than -posting publicly on GitHub. Be sure to provide us with the version identifier as well as details +Please do not report security vulnerabilities through public GitHub issues, discussions, or pull requests. + +Report them privately through GitHub's [private vulnerability reporting](https://github.com/GreptimeTeam/greptimedb/security/advisories/new) +(the "Report a vulnerability" button on the repository's Security tab). If you cannot use GitHub, +email info@greptime.com instead. Be sure to provide us with the version identifier as well as details on how the vulnerability can be exploited.