ppkarwasz commented on PR #40988: URL: https://github.com/apache/beam/pull/40988#issuecomment-6634301496
Hi @damccorm, I think you should remove `[email protected]`. In the ASF there are currently two kinds of PMCs: - Those that use `[email protected]` as security contact. We triage their reports and forward those that _might_ be valid (according to your threat model and public documentation). - Those that have a `security@<pmc>.apache.org` and handle report directly. We help them with some book keeping. If you prefer to receive the reports directly, you can open an INFRA ticket to create `[email protected]`: see https://cwiki.apache.org/confluence/spaces/SECURITY/pages/303794800/Getting+help+handling+security+reports -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
