Skip to content

Commit

Permalink
Update SECURITY policy (#1155)
Browse files Browse the repository at this point in the history
  • Loading branch information
shanmydell authored Feb 28, 2024
1 parent da26f69 commit 7e4b5bd
Showing 1 changed file with 3 additions and 7 deletions.
10 changes: 3 additions & 7 deletions docs/SECURITY.md
Original file line number Diff line number Diff line change
Expand Up @@ -14,14 +14,10 @@ See the License for the specific language governing permissions and
limitations under the License.
-->

# Security Policy
# Reporting Security Issues/Vulnerabilities

The CSM services/repositories are inspected for security vulnerabilities via [gosec](https://github.com/securego/gosec).
The Dell Container Storage Modules team and community take security bugs seriously. We sincerely appreciate all your efforts and responsibility to disclose your findings.

Every issue detected by `gosec` is mapped to a [CWE (Common Weakness Enumeration)](http://cwe.mitre.org/data/index.html) which describes in more generic terms the vulnerability. The exact mapping can be found at https://github.com/securego/gosec in the issue.go file. The list of rules checked by `gosec` can be found [here](https://github.com/securego/gosec#available-rules).
To report a security issue, please submit the security advisory form ["Report a Vulnerability"](https://github.com/dell/csm/security/advisories/new).

In addition to this, there are various security checks that get executed against a branch when a pull request is created/updated. Please refer to [pull request](/docs/CONTRIBUTING.md#pull-requests) for more information.

## Reporting a Vulnerability

Please report a vulnerability by opening an Issue in this repository.

0 comments on commit 7e4b5bd

Please sign in to comment.