{"action":"opened","issue":{"url":"https://api.github.com/repos/kubernetes/helm/issues/662","repository_url":"https://api.github.com/repos/kubernetes/helm","labels_url":"https://api.github.com/repos/kubernetes/helm/issues/662/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/helm/issues/662/comments","events_url":"https://api.github.com/repos/kubernetes/helm/issues/662/events","html_url":"https://github.com/kubernetes/helm/issues/662","id":153791548,"number":662,"title":"Report security issue?","user":{"login":"mattfarina","id":62991,"avatar_url":"https://avatars.githubusercontent.com/u/62991?v=3","gravatar_id":"","url":"https://api.github.com/users/mattfarina","html_url":"https://github.com/mattfarina","followers_url":"https://api.github.com/users/mattfarina/followers","following_url":"https://api.github.com/users/mattfarina/following{/other_user}","gists_url":"https://api.github.com/users/mattfarina/gists{/gist_id}","starred_url":"https://api.github.com/users/mattfarina/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mattfarina/subscriptions","organizations_url":"https://api.github.com/users/mattfarina/orgs","repos_url":"https://api.github.com/users/mattfarina/repos","events_url":"https://api.github.com/users/mattfarina/events{/privacy}","received_events_url":"https://api.github.com/users/mattfarina/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-05-09T14:37:54Z","updated_at":"2016-05-09T14:37:54Z","closed_at":null,"body":"Where is the proper place to report a security issue? If I follow the [k8s policy it's to Google](http://kubernetes.io/docs/reporting-security-issues/). But, k8s is now part of the CNCF and Helm (through Helm Classic) wasn't a Google product.\r\n\r\nIs the proper place to report a Helm security issue to Google?\r\n\r\nOf course, security issues like this *should* never happen."}}