From dc805165439017dac648d967262485e6ae45e268 Mon Sep 17 00:00:00 2001 From: don-petry <36422719+don-petry@users.noreply.github.com> Date: Wed, 14 Oct 2026 16:56:46 -0500 Subject: [PATCH] docs: take security reports through GitHub private vulnerability reporting The security@petry-projects.dev address never received mail (the domain has no DNS). Private vulnerability reporting is now enabled on this repo, so reports arrive as private draft advisories and no email address is published. Co-Authored-By: Claude Opus 5.5 --- SECURITY.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SECURITY.md b/SECURITY.md index 014f1e3e..1534c7d2 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -12,7 +12,7 @@ If you discover a security vulnerability in this project, please report it respo **Please do NOT open a public GitHub issue for security vulnerabilities.** -Instead, please send an email to **security@petry-projects.dev** or use +Instead, please use [GitHub's private vulnerability reporting](../../security/advisories/new). We will acknowledge receipt within 72 hours and aim to provide a fix or mitigation plan within 30 days.