michaeljmarshall commented on issue #16919:
URL: https://github.com/apache/pulsar/issues/16919#issuecomment-1211011900

   Great catch, @hpvd. I didn't realize I had missed advising _how_ to report a 
vulnerability. I agree with duplicating the information in the `SECURITY.md` 
file. This information won't change with any frequency, and it is imperative to 
make it easy to find.
   
   I'd like to propose that we don't version the security page, but instead 
have some top level tab (or something like that) to make it easy to find and 
maintain.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to