Skip to content

Add SECURITY.md to emphasize reporting issues - #73

Merged
lezama merged 1 commit into
trunkfrom
add/security-policy
Oct 22, 2026
Merged

lezama merged 1 commit into
trunkfrom
add/security-policy

Conversation

@jeffpaul

Copy link
Copy Markdown
Member

Updated the SECURITY.md file to focus on reporting security issues and removed outdated sections.

What

This pull request adds a new section to the SECURITY.md file, providing clear instructions for reporting security issues. The update guides users to submit security concerns through the WordPress HackerOne program.

Why

Verification

  • ruff check python
  • mypy python
  • pytest python
  • PHP syntax / runtime smoke test (when runtime/ changed)

Score impact

  • This PR does not change how any test is scored, or
  • This PR changes scoring/dataset/runtime behavior — bump the relevant
    version (scoring_version, suite version, or runtime version), and
    note below whether new scores are comparable to previous runs.

Updated the SECURITY.md file to focus on reporting security issues and removed outdated sections.
@jeffpaul
jeffpaul requested a review from a team October 22, 2026 02:00
@jeffpaul jeffpaul self-assigned this Oct 22, 2026
@github-actions

github-actions Bot commented Oct 22, 2026 •

Copy link
Copy Markdown

The following accounts have interacted with this PR and/or linked issues. I will continue to update these lists as activity occurs.

If you're merging code through a pull request on GitHub, copy and paste the following into the bottom of the merge commit message.

Co-authored-by: jeffpaul <jeffpaul@git.wordpress.org>
Co-authored-by: lezama <migueluy@git.wordpress.org>

To understand the WordPress project's expectations around crediting contributors, please review the Contributor Attribution page in the Core Handbook.


Props Bot commands

You can trigger Props Bot actions by commenting on this PR:

  • @propsbot add <username> to give props to a GitHub user. Requires write access.
  • @propsbot remove <username> to leave a user out of the props. Requires write access.
  • @propsbot refresh to refresh this list. Adding the props-bot label works too.

@lezama lezama left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm, thanks!

@lezama
lezama merged commit d20b010 into trunk Oct 22, 2026
6 checks passed
@lezama
lezama deleted the add/security-policy branch October 22, 2026 18:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants