add SECURITY.md

Add a short document directing contributors on how to report security
issues against the project.

Signed-off-by: Alex Stewart <alex.stewart@ni.com>
This commit is contained in:
Alex Stewart
2023-11-30 16:42:13 -05:00
parent e5290560a5
commit 527c9763dc

8
SECURITY.md Normal file
View File

@@ -0,0 +1,8 @@
Reporting Security Issues
=========================
If you would like to report a public issue (for example, one with a released CVE number), please report it using the [opkg bugzilla tracker](https://bugzilla.yoctoproject.org/buglist.cgi?quicksearch=Product%3Aopkg).
If you have a patch ready, submit it following the same procedure as any other patch as described in [CONTRIBUTING](https://git.yoctoproject.org/opkg-utils/tree/CONTRIBUTING).
If you are reporting an unreleased or urgent issue, please send an email directly to the project maintainer: <alex.stewart@ni.com>. Be sure to include all the details you can about reproducing or exploiting the issue.