moby/SECURITY.md

# Reporting security issues

The Moby maintainers take security seriously. If you discover a security issue, please bring it to their attention right away!

### Reporting a Vulnerability

Please **DO NOT** file a public issue, instead send your report privately to security@docker.com.

Security reports are greatly appreciated and we will publicly thank you for it, although we keep your name confidential if you request it. We also like to send gifts—if you're into schwag, make sure to let us know. We currently do not offer a paid security bounty program, but are not ruling it out in the future.
Create SECURITY.md for GitHub security policy page What would you like to be added: GitHub has a [security policy](https://github.com/moby/moby/security/policy) page that uses a SECURITY.md file from the repository to show the project's security policy. Why is this needed: Adding this file makes it easier for security researchers to learn about the correct place to report a vulnerability in the [Moby](https://github.com/moby/moby) project. Signed-off-by: Andrea <crypto.andrea@protonmail.ch> 2019-06-17 16:15:17 +00:00			`# Reporting security issues`

			`The Moby maintainers take security seriously. If you discover a security issue, please bring it to their attention right away!`

			`### Reporting a Vulnerability`

			`Please DO NOT file a public issue, instead send your report privately to security@docker.com.`

Update SECURITY.md to have an option to keep name anonymous if requested. Signed-off-by: Yong Tang <yong.tang.github@outlook.com> 2019-06-18 16:37:16 +00:00			`Security reports are greatly appreciated and we will publicly thank you for it, although we keep your name confidential if you request it. We also like to send gifts—if you're into schwag, make sure to let us know. We currently do not offer a paid security bounty program, but are not ruling it out in the future.`