{"action":"created","issue":{"url":"https://api.github.com/repos/senecajs/senecajs.org/issues/153","repository_url":"https://api.github.com/repos/senecajs/senecajs.org","labels_url":"https://api.github.com/repos/senecajs/senecajs.org/issues/153/labels{/name}","comments_url":"https://api.github.com/repos/senecajs/senecajs.org/issues/153/comments","events_url":"https://api.github.com/repos/senecajs/senecajs.org/issues/153/events","html_url":"https://github.com/senecajs/senecajs.org/issues/153","id":125752248,"number":153,"title":"Write a responsible disclosure policy","user":{"login":"AdrieanKhisbe","id":2601132,"avatar_url":"https://avatars.githubusercontent.com/u/2601132?v=3","gravatar_id":"","url":"https://api.github.com/users/AdrieanKhisbe","html_url":"https://github.com/AdrieanKhisbe","followers_url":"https://api.github.com/users/AdrieanKhisbe/followers","following_url":"https://api.github.com/users/AdrieanKhisbe/following{/other_user}","gists_url":"https://api.github.com/users/AdrieanKhisbe/gists{/gist_id}","starred_url":"https://api.github.com/users/AdrieanKhisbe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/AdrieanKhisbe/subscriptions","organizations_url":"https://api.github.com/users/AdrieanKhisbe/orgs","repos_url":"https://api.github.com/users/AdrieanKhisbe/repos","events_url":"https://api.github.com/users/AdrieanKhisbe/events{/privacy}","received_events_url":"https://api.github.com/users/AdrieanKhisbe/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/senecajs/senecajs.org/labels/discussion","name":"discussion","color":"d4c5f9"}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":10,"created_at":"2016-01-09T10:42:46Z","updated_at":"2016-08-11T16:02:02Z","closed_at":"2016-08-08T16:25:54Z","body":"Here is a suggestion from [an article](https://kev.inburke.com/kevin/dont-use-sails-or-waterline/) I ended up reading while unstaking my tab article on OSS projects\r\n\r\n> If I find a critical vulnerability in Sails how should I communicate it to the core team?\r\n- What guarantees are given about time to a patch?\r\n- Will reporters be credited for their work in finding a vulnerability?\r\n- How are critical security vulnerabilities disclosed to the community?\r\n- Are vulnerabilities given a CVE number?\r\n- Once you write a page like this, how can I be expected to find it?\r\n\r\n> Here is an example of what a page like this should look like: http://docs.python-requests.org/en/latest/community/vulnerabilities/\r\n\r\ncf (https://github.com/balderdashy/sails/issues/2830)\r\n\r\n@senecajs/core & @senecajs/contributors, what do you think about this?"},"comment":{"url":"https://api.github.com/repos/senecajs/senecajs.org/issues/comments/239207042","html_url":"https://github.com/senecajs/senecajs.org/issues/153#issuecomment-239207042","issue_url":"https://api.github.com/repos/senecajs/senecajs.org/issues/153","id":239207042,"user":{"login":"evilpacket","id":115769,"avatar_url":"https://avatars.githubusercontent.com/u/115769?v=3","gravatar_id":"","url":"https://api.github.com/users/evilpacket","html_url":"https://github.com/evilpacket","followers_url":"https://api.github.com/users/evilpacket/followers","following_url":"https://api.github.com/users/evilpacket/following{/other_user}","gists_url":"https://api.github.com/users/evilpacket/gists{/gist_id}","starred_url":"https://api.github.com/users/evilpacket/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/evilpacket/subscriptions","organizations_url":"https://api.github.com/users/evilpacket/orgs","repos_url":"https://api.github.com/users/evilpacket/repos","events_url":"https://api.github.com/users/evilpacket/events{/privacy}","received_events_url":"https://api.github.com/users/evilpacket/received_events","type":"User","site_admin":false},"created_at":"2016-08-11T16:02:02Z","updated_at":"2016-08-11T16:02:02Z","body":"I will do a freak'n dance if you add anything related to communicating how security issues are handled :) /jig \n\n> On Jan 12, 2016, at 9:42 AM, Wyatt Preul <notifications@github.com> wrote:\n> \n> Love supporting security researchers. We can model after the node security page: https://nodejs.org/en/security/ <https://nodejs.org/en/security/> I am sure @evilpacket <https://github.com/evilpacket> will be happy that we have one.\n> \n> —\n> Reply to this email directly or view it on GitHub <https://github.com/senecajs/senecajs.org/issues/153#issuecomment-170987077>.\n> \n\n"}}
{"actor":{"display_login":"evilpacket"}}