From 6f4a16945b54bcbdac0b021a4f03e354d0b0bac4 Mon Sep 17 00:00:00 2001 From: sELCUK hALTAS <52704295+selcukhaltas@users.noreply.github.com> Date: Thu, 8 Sep 2022 15:06:11 +0300 Subject: [PATCH] Update SECURITY.md --- SECURITY.md | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index 7933b62..7bcc68b 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -1,9 +1,10 @@ -Thanks for helping make GitHub safe for everyone. +# GitHub Security Policy -## Security +GitHub's [Bug Bounty program](https://bounty.github.com) rewards researchers for discovering security vulnerabilities in a number of repositories. The full list of projects that are eligible for rewards are [available on our Bug Bounty site](https://bounty.github.com/#scope). -GitHub takes the security of our software products and services seriously, including all of the open source code repositories managed through our GitHub organizations, such as [GitHub](https://github.com/GitHub). +If the repository is eligible for rewards, you can submit a report via [HackerOne](https://hackerone.com/github). You can find more useful information in our [rules](https://bounty.github.com/#rules) and [FAQ](https://bounty.github.com/#faqs). +<<<<<<< HEAD Even though [open source repositories are outside of the scope of our bug bounty program](https://bounty.github.com/index.html#scope) and therefore not eligible for bounty rewards, we will ensure that your finding gets passed along to the appropriate maintainers for remediation. ## Reporting Security Issues @@ -29,3 +30,6 @@ This information will help us triage your report more quickly. ## Policy See [GitHub's Safe Harbor Policy](https://docs.github.com/en/github/site-policy/github-bug-bounty-program-legal-safe-harbor#1-safe-harbor-terms) +======= +For repositories not covered by the Bug Bounty program, please open an issue. +>>>>>>> parent of 5540da0 (Updating security.md file)