This is an automated email from the ASF dual-hosted git repository.
exceptionfactory pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/nifi-site.git
The following commit(s) were added to refs/heads/main by this push:
new f17ddd9 NIFI-9619 Removed GPG key from Security Mailing List reporting
new f52e60a Merge pull request #55 from exceptionfactory/NIFI-9619
f17ddd9 is described below
commit f17ddd92b36becffa6e567585ae7c91fec951f66
Author: exceptionfactory <[email protected]>
AuthorDate: Fri Jan 21 16:10:53 2022 -0600
NIFI-9619 Removed GPG key from Security Mailing List reporting
---
src/pages/html/registry-security.hbs | 4 ++--
src/pages/html/security.hbs | 5 +++--
2 files changed, 5 insertions(+), 4 deletions(-)
diff --git a/src/pages/html/registry-security.hbs
b/src/pages/html/registry-security.hbs
index 842697f..ed4db49 100644
--- a/src/pages/html/registry-security.hbs
+++ b/src/pages/html/registry-security.hbs
@@ -34,8 +34,8 @@ title: Apache NiFi Registry Security Reports
<h3>Reporting Methods</h3>
<p>NiFi Registry receives vulnerability reports through the Apache
NiFi team via the following means:</p>
<ul>
- <li>Send an email to <a
href="mailto:[email protected]";>[email protected]</a>. This is a
private list monitored by the <a href="people.html">PMC</a>. For sensitive
- disclosures, the GPG key fingerprint is <strong>1230 3BB8 1F22
E11C 8725 926A AFF2 B368 23B9 44E9</strong>.
+ <li>NiFi Security Mailing List: <a
href="mailto:[email protected]";>[email protected]</a>.
+ Members of the <a href="people.html">Project Management
Committee</a> monitor this private mailing list and respond to disclosures.
</li>
</ul>
<p>Thank you for helping keep Apache NiFi Registry and our users
safe!</p>
diff --git a/src/pages/html/security.hbs b/src/pages/html/security.hbs
index d591b6d..8483a10 100644
--- a/src/pages/html/security.hbs
+++ b/src/pages/html/security.hbs
@@ -41,8 +41,9 @@ title: Apache NiFi Security Reports
<h3>Reporting Methods</h3>
<p>NiFi accepts reports in multiple ways:</p>
<ul>
- <li>Send an email to <a
href="mailto:[email protected]";>[email protected]</a>. This is a
private list monitored by the <a href="people.html">PMC</a>. For sensitive
- disclosures, the GPG key fingerprint is <strong>1230 3BB8 1F22
E11C 8725 926A AFF2 B368 23B9 44E9</strong>.
+ <li>NiFi Security Mailing List: <a
href="mailto:[email protected]";>[email protected]</a>.
+ Members of the <a href="people.html">Project Management
Committee</a> monitor this private mailing list and respond to disclosures.
+ </li>
</li>
<li>NiFi has a <a href="https://hackerone.com/apachenifi";
target="_blank">HackerOne</a> project page. HackerOne provides a triaged
process for researchers and organizations to
collaboratively report and resolve security vulnerabilities.
