grapevine/book/contributing/security.md
Charles Hall 42adad330e
move security info to its own page
This makes it easier to find.

Also sort the maintainers list while I'm here.
2024-12-11 13:26:16 -08:00

597 B

Coordinated vulnerability disclosure

If you find a security vulnerability in Grapevine, please privately report it to the Grapevine maintainers in one of the following ways:

  • Open a GitLab issue that's marked as confidential
  • Create a private, invite-only, E2EE Matrix room and invite the following users:
    • @charles:computer.surgery
    • @olivia:computer.surgery
    • @xiretza:xiretza.xyz

If the maintainers determine that the vulnerability is shared with Conduit or other forks, we'll work with their teams to ensure that all affected projects can release a fix at the same time.