Commit 3d26572
doc: add point to ask H1 reporter about credit
This commit updates the security release process document with a bullet
point to ask the HackerOne reporter if they would like to be credited
for reporting the vulnerability. We might also be able to add a question
like this to the HackerOne template when a report is created, but it
would still be good to have this bullet point to remember to include the
information in the security release blog post.
PR-URL: #39585
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Richard Lau <rlau@redhat.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>1 parent 469190d commit 3d26572
1 file changed
Lines changed: 5 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -21,6 +21,11 @@ information described. | |||
| 21 | 21 | the date in the slug so that it will move to the top of the blog list.) | |
| 22 | 22 | * [ ] pre-release: ***LINK TO PR*** | |
| 23 | 23 | * [ ] post-release: ***LINK TO PR*** | |
| 24 | + * Ask the HackerOne reporter if they would like to be credited on the | ||
| 25 | + security release blog page: | ||
| 26 | + ```text | ||
| 27 | + Thank you to <name> for reporting this vulnerability. | ||
| 28 | + ``` | ||
| 24 | 29 | ||
| 25 | 30 | * [ ] Get agreement on the planned date for the release: ***RELEASE DATE*** | |
| 26 | 31 | ||
0 commit comments