Closed feanil closed 1 year ago
I also see a mention on https://openedx.org/community/connect/
Hi, I'm going to work on this issue.
@MAAngamarca sounds good, let me know if you have any questions! I've assigned this to you for now.
Just for clarity: now that axim.org is a thing, the address should still be security@openedx.org?
@nedbat yes, we're trying to use the openedx.org
address as the new address instead of the axim
one. This makes it easier to separate the security issues related to axim the company from security issues related to the Open edX Project.
@MAAngamarca have you had time to work on this? I don't know if I've missed the relevant PRs. If not, should someone else pick this up?
@feanil Sorry, I forgot to change in all repositories, but I just did.
I've checked the ORG and updated the openedx.org site. This should be all set now, thank you @MAAngamarca!
Also update any mentions of security@tcril.org to security@openedx.org
As of 2023-03-10, this includes in our codebases:
Reasoning
For any security issues with the Open edX Platform codebase, they should go to security@openedx.org which will be handled by the openedx security working group. The security@tcril.org or security@axim.org addresses should be used for reporting issues with resources owned by Axim that are not a part of the Open edX codebase.