*: add information about security mailing list

Signed-off-by: Aleksa Sarai <asarai@suse.de>
2026-07-11 06:03:57 +08:00 · 2016-12-03 18:54:53 +11:00
parent 4271a8b5ae
commit ac422aa545
2 changed files with 13 additions and 1 deletions
@@ -1,5 +1,12 @@
 ## Contribution Guidelines

+### Security issues
+
+If you are reporting a security issue, do not create an issue or file a pull
+request on GitHub. Instead, disclose the issue responsibly by sending an email
+to security@opencontainers.org (which is inhabited only by the maintainers of
+the various OCI projects).
+
 ### Pull requests are always welcome

 We are always thrilled to receive pull requests, and do our best to