powsybl / .github

1 stars 0 forks source link

Update SECURITY.md #33

Closed So-Fras closed 9 months ago

So-Fras commented 9 months ago

Please check if the PR fulfills these requirements

Does this PR already have an issue describing the problem? No

What kind of change does this PR introduce? User documentation update regarding security policy on the PowSyBl project.

bc-rte commented 9 months ago

The severity assesment criteria are not described. This is an issue, because, according to the process, the person reporting a vulnerability must assess severity in order to know which reporting channel to use.