Skip to content

Revise security policy details and reporting process#121313

Merged
akoeplinger merged 2 commits into
mainfrom
blowdart-security-md
Nov 24, 2025
Merged

Revise security policy details and reporting process#121313
akoeplinger merged 2 commits into
mainfrom
blowdart-security-md

Conversation

@blowdart

@blowdart blowdart commented Nov 3, 2025

Copy link
Copy Markdown
Contributor

Removed second mention of email, updated link titles, edited follow-up process.

Removed second mention of email, updated link titles, edited follow-up process.
Copilot AI review requested due to automatic review settings November 3, 2025 19:25
@blowdart blowdart requested a review from akoeplinger November 3, 2025 19:25
@dotnet-policy-service

Copy link
Copy Markdown
Contributor

Tagging subscribers to this area: @dotnet/area-system-security, @bartonjs, @vcsjones
See info in area-owners.md if you want to be subscribed.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates the SECURITY.md file to improve security reporting guidance and align terminology with current .NET branding. The changes modernize the documentation by updating references from ".NET Core" to the broader ".NET" terminology, enhance the follow-up instructions for security reports, and reorder content to place the important warning about not opening security issues more prominently.

Key changes:

  • Updated product naming from ".NET Core" to ".NET" throughout the document
  • Reorganized content to emphasize the warning against opening public issues for security concerns
  • Enhanced follow-up instructions with specific guidance on using the MSRC portal's messaging functionality

Comment thread SECURITY.md Outdated
Comment thread SECURITY.md Outdated
Comment thread SECURITY.md Outdated

@bartonjs bartonjs left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, except for the typos that copilot saw.

Comment thread SECURITY.md Outdated
Co-authored-by: Jeremy Barton <[email protected]>
Co-authored-by: Copilot <[email protected]>
@akoeplinger akoeplinger enabled auto-merge (squash) November 24, 2025 15:09
@akoeplinger

Copy link
Copy Markdown
Member

/ba-g markdown changes only

@akoeplinger akoeplinger merged commit 3fc131a into main Nov 24, 2025
14 of 15 checks passed
@akoeplinger akoeplinger deleted the blowdart-security-md branch November 24, 2025 15:10
@github-actions github-actions Bot locked and limited conversation to collaborators Dec 25, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants