Update vulnerability disclosure process

psf / requests

A simple, yet elegant, HTTP library.

https://requests.readthedocs.io/en/latest/

Apache License 2.0

52.19k stars 9.33k forks source link

Update vulnerability disclosure process #6820

Closed nateprewitt closed 2 weeks ago

nateprewitt commented 2 weeks ago

This PR will move our desired workflow for vulnerability reports to use GitHub's Security Advisory form. This will hopefully simplify the workflow for reporters by removing the disclosure signing steps and using a standardized UI for reviewing and communicating about in-progress advisories.