raboof/pekko
1
0
Fork 0
Code Issues Pull requests Projects Releases 6 Packages Wiki Activity Actions 10

update security docs (#114)

Browse source
This commit is contained in:
PJ Fanning 2023-01-18 16:22:05 +01:00 • committed by GitHub
parent 3d93c29737
commit ec68a5280b
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

13
docs/src/main/paradox/security/index.md
View file

@ -2,19 +2,20 @@
## Receiving Security Advisories
The best way to receive any and all security announcements is to subscribe to the [Pekko security list](https://groups.google.com/forum/#!forum/akka-security).
The best way to receive any and all security announcements is to subscribe to the [Apache Announce Mailing List](https://lists.apache.org/list.html?announce@apache.org).
The mailing list is very low traffic, and receives notifications only after security reports have been managed by the core team and fixes are publicly available.
This mailing list has a reasonable level of traffic, and receives notifications only after security reports have been managed by the core Apache teams and fixes are publicly available.
This mailing list also has announcements of releases for Apache projects.
## Reporting Vulnerabilities
We strongly encourage people to report such problems to our private security mailing list first, before disclosing them in a public forum.
Following best practice, we strongly encourage anyone to report potential security
vulnerabilities to [security@pekko.io](mailto:security@pekko.io) before disclosing them in a public forum like the mailing list or as a GitHub issue.
Please follow the [guidelines](https://www.apache.org/security/) laid down by the Apache Security team.
Reports to this email address will be handled by our security team, who will work together with you
to ensure that a fix can be provided without delay.
Ideally, any issues affecting Apache Pekko and Akka should be reported to Apache team first. We will share the
report with the Lightbend Akka team.
## Security Related Documentation