grapevine/book/contributing.md
2024-12-11 13:25:12 -08:00

1.2 KiB

Contributing

On GitLab

Instructions for getting GitLab access can be found on the sign-in page.

GitLab access is primarily useful if you'd like to open issues, engage in discussions on issues or merge requests, or submit your own merge requests.

Note that if the sign-up process is too much trouble and you'd just like to report an issue, feel free to report it in the Matrix room at #grapevine:computer.surgery; someone with GitLab access can open an issue on your behalf.

Information about a vulnerability

If you find a security vulnerability in Grapevine, please privately report it to the Grapevine maintainers in one of the following ways:

  • Open a GitLab issue that's marked as confidential
  • Create a private, invite-only, E2EE Matrix room and invite the following users:
    • @olivia:computer.surgery
    • @charles:computer.surgery
    • @xiretza:xiretza.xyz

If the maintainers determine that the vulnerability is shared with Conduit or other forks, we'll work with their teams to ensure that all affected projects can release a fix at the same time.