SECURITY.md: clarify the use of AI
Commit:
https://github.com/vim/vim/commit/2c976d0de48db4ee56769669edbc8875564d3453
Author: Christian Brabandt <[email protected]>
Date: Wed Apr 1 10:33:42 2026 +0000
SECURITY.md: clarify the use of AI
Signed-off-by: Christian Brabandt <[email protected]>
diff --git a/SECURITY.md b/SECURITY.md
index 7d1e0166c..9d1ecf35a 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -2,9 +2,16 @@
## Reporting a vulnerability
-If you want to report a security issue, please privately disclose the issue to
the vim-security mailing list
[email protected]
-
-This is a private list, read only by the maintainers, but anybody can post,
after moderation.
+If you want to report a security issue, please privately disclose the issue
either via:
+- The vim-security mailing list: [email protected]
+ This is a private list, read only by the maintainers, but anybody can post.
+- [GitHub Security
Advisories](https://github.com/vim/vim/security/advisories/new)
**Please don't publicly disclose the issue until it has been addressed by us.**
+
+## Guidelines for reporting
+- Clearly explain **why** the behaviour is a security issue, not just that a
bug exists.
+- Keep reports concise and focused.
+- Do not flood us with a list of issues. Report them one by one to ensure to
not overwhelm us with the work load.
+- Do **not** submit AI-generated reports without carefully reviewing them
first. Low-quality or
+ speculative reports waste maintainer time and will be closed without action,
and repeat offenders **will be banned**.
--
--
You received this message from the "vim_dev" maillist.
Do not top-post! Type your reply below the text you are replying to.
For more information, visit http://www.vim.org/maillist.php
---
You received this message because you are subscribed to the Google Groups
"vim_dev" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion visit
https://groups.google.com/d/msgid/vim_dev/E1w7t4J-00GNBF-Rs%40256bit.org.
