{"action":"created","comment":{"url":"https://api.github.com/repos/coredns/coredns/pulls/comments/223086619","pull_request_review_id":162135084,"id":223086619,"node_id":"MDI0OlB1bGxSZXF1ZXN0UmV2aWV3Q29tbWVudDIyMzA4NjYxOQ==","diff_hunk":"@@ -0,0 +1,193 @@\n+# Security Release Process\n+\n+The CoreDNS project has adopted this security disclosures and response policy\n+to ensure responsible handling of critical issues.\n+\n+\n+## Product Security Team (PST)\n+\n+Security vulnerabilities should be handled quickly and sometimes privately. \n+The primary goal of this process is to reduce the total time users are vulnerable to publicly known exploits.\n+\n+The Product Security Team (PST) is responsible for organizing the entire response including internal communication and external disclosure.\n+\n+The initial Product Security Team will consist of the set of maintainers that volunteered.\n+The list of members is identified in this [document](https://github.com/coredns/coredns/OWNERS) under the string `product-security-team` and is synchronized with the receivers of the members of security@coredns.io mailing list.\n+\n+### mailing lists\n+\n+* security@coredns.io : for any security concerns. Received by Product Security Team members, and used by this Team to discuss security issues and fixes.\n+* distributors-announce@coredns.io: for early private information on Security patch releases. see below how CoreDNS distributors can apply for this list.\n+\n+## Disclosures\n+\n+### Private Disclosure Processes\n+\n+If you find a security vulnerability or any security related issues, \n+please DO NOT file a public issue. Do not create a Github issue.\n+Instead, send your report privately to security@coredns.io.\n+Security reports are greatly appreciated and we will publicly thank you for it.\n+\n+Please provide as much information as possible, so we can react quickly.\n+For instance, that could include:\n+- Description of the location and potential impact of the vulnerability;\n+- A detailed description of the steps required to reproduce the vulnerability (POC scripts, screenshots, and compressed packet captures are all helpful to us)\n+- Whatever else you think we might need to identify the source of this vulnerability\n+- Do not forget: a Name/handle and a link for recognition in our Hall of Fame !","path":"SECURITY-RELEASE-PROCESS.md","position":36,"original_position":36,"commit_id":"9aefb85eb91642d816d0102e3204b2f48c173c86","original_commit_id":"9aefb85eb91642d816d0102e3204b2f48c173c86","user":{"login":"miekg","id":353371,"node_id":"MDQ6VXNlcjM1MzM3MQ==","avatar_url":"https://avatars1.githubusercontent.com/u/353371?v=4","gravatar_id":"","url":"https://api.github.com/users/miekg","html_url":"https://github.com/miekg","followers_url":"https://api.github.com/users/miekg/followers","following_url":"https://api.github.com/users/miekg/following{/other_user}","gists_url":"https://api.github.com/users/miekg/gists{/gist_id}","starred_url":"https://api.github.com/users/miekg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/miekg/subscriptions","organizations_url":"https://api.github.com/users/miekg/orgs","repos_url":"https://api.github.com/users/miekg/repos","events_url":"https://api.github.com/users/miekg/events{/privacy}","received_events_url":"https://api.github.com/users/miekg/received_events","type":"User","site_admin":false},"body":"Where is the hall of fame?","created_at":"2018-10-05T17:39:27Z","updated_at":"2018-10-05T17:43:21Z","html_url":"https://github.com/coredns/coredns/pull/1861#discussion_r223086619","pull_request_url":"https://api.github.com/repos/coredns/coredns/pulls/1861","author_association":"MEMBER","_links":{"self":{"href":"https://api.github.com/repos/coredns/coredns/pulls/comments/223086619"},"html":{"href":"https://github.com/coredns/coredns/pull/1861#discussion_r223086619"},"pull_request":{"href":"https://api.github.com/repos/coredns/coredns/pulls/1861"}}},"pull_request":{"url":"https://api.github.com/repos/coredns/coredns/pulls/1861","id":193164014,"node_id":"MDExOlB1bGxSZXF1ZXN0MTkzMTY0MDE0","html_url":"https://github.com/coredns/coredns/pull/1861","diff_url":"https://github.com/coredns/coredns/pull/1861.diff","patch_url":"https://github.com/coredns/coredns/pull/1861.patch","issue_url":"https://api.github.com/repos/coredns/coredns/issues/1861","number":1861,"state":"open","locked":false,"title":"Security release process description","user":{"login":"fturib","id":19315664,"node_id":"MDQ6VXNlcjE5MzE1NjY0","avatar_url":"https://avatars1.githubusercontent.com/u/19315664?v=4","gravatar_id":"","url":"https://api.github.com/users/fturib","html_url":"https://github.com/fturib","followers_url":"https://api.github.com/users/fturib/followers","following_url":"https://api.github.com/users/fturib/following{/other_user}","gists_url":"https://api.github.com/users/fturib/gists{/gist_id}","starred_url":"https://api.github.com/users/fturib/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fturib/subscriptions","organizations_url":"https://api.github.com/users/fturib/orgs","repos_url":"https://api.github.com/users/fturib/repos","events_url":"https://api.github.com/users/fturib/events{/privacy}","received_events_url":"https://api.github.com/users/fturib/received_events","type":"User","site_admin":false},"body":"<!--\r\nThank you for contributing to CoreDNS!\r\n\r\nPlease provide the following information to help us make the most of your pull request:\r\n-->\r\n\r\n### 1. What does this pull request do?\r\n\r\nAdd a sub-section in the section \"Security\" of README, describing the security release process that CoreDNS expect to follow  in order to be compatible with K8s's own security release process\r\n\r\n### 2. Which issues (if any) are related?\r\nCoreDNS going GA for k8s.\r\n\r\n\r\n### 3. Which documentation changes (if any) need to be made?\r\nREADME.\r\n\r\n### 4. TODO Before merging\r\n-  Include our Public PHP key in this section, in case they (or we) want the information encrypted.\r\nAdd public PHP key for encrypted email to security@coredns.io. (team and CyberInt should work together on curating this key, so that it is managed effectively.)\r\n- update security@coredns.io receivers with all PST members\r\n- create a  distributors-announce@coredns.io mailing list","created_at":"2018-06-06T23:04:11Z","updated_at":"2018-10-05T17:43:20Z","closed_at":null,"merged_at":null,"merge_commit_sha":"6e0356a68e8aea11956ebb5f56199ddabb8c31ae","assignee":null,"assignees":[],"requested_reviewers":[{"login":"caniszczyk","id":63777,"node_id":"MDQ6VXNlcjYzNzc3","avatar_url":"https://avatars1.githubusercontent.com/u/63777?v=4","gravatar_id":"","url":"https://api.github.com/users/caniszczyk","html_url":"https://github.com/caniszczyk","followers_url":"https://api.github.com/users/caniszczyk/followers","following_url":"https://api.github.com/users/caniszczyk/following{/other_user}","gists_url":"https://api.github.com/users/caniszczyk/gists{/gist_id}","starred_url":"https://api.github.com/users/caniszczyk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/caniszczyk/subscriptions","organizations_url":"https://api.github.com/users/caniszczyk/orgs","repos_url":"https://api.github.com/users/caniszczyk/repos","events_url":"https://api.github.com/users/caniszczyk/events{/privacy}","received_events_url":"https://api.github.com/users/caniszczyk/received_events","type":"User","site_admin":false},{"login":"yongtang","id":6932348,"node_id":"MDQ6VXNlcjY5MzIzNDg=","avatar_url":"https://avatars0.githubusercontent.com/u/6932348?v=4","gravatar_id":"","url":"https://api.github.com/users/yongtang","html_url":"https://github.com/yongtang","followers_url":"https://api.github.com/users/yongtang/followers","following_url":"https://api.github.com/users/yongtang/following{/other_user}","gists_url":"https://api.github.com/users/yongtang/gists{/gist_id}","starred_url":"https://api.github.com/users/yongtang/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/yongtang/subscriptions","organizations_url":"https://api.github.com/users/yongtang/orgs","repos_url":"https://api.github.com/users/yongtang/repos","events_url":"https://api.github.com/users/yongtang/events{/privacy}","received_events_url":"https://api.github.com/users/yongtang/received_events","type":"User","site_admin":false}],"requested_teams":[],"labels":[],"milestone":null,"commits_url":"https://api.github.com/repos/coredns/coredns/pulls/1861/commits","review_comments_url":"https://api.github.com/repos/coredns/coredns/pulls/1861/comments","review_comment_url":"https://api.github.com/repos/coredns/coredns/pulls/comments{/number}","comments_url":"https://api.github.com/repos/coredns/coredns/issues/1861/comments","statuses_url":"https://api.github.com/repos/coredns/coredns/statuses/9aefb85eb91642d816d0102e3204b2f48c173c86","head":{"label":"fturib:security-readme","ref":"security-readme","sha":"9aefb85eb91642d816d0102e3204b2f48c173c86","user":{"login":"fturib","id":19315664,"node_id":"MDQ6VXNlcjE5MzE1NjY0","avatar_url":"https://avatars1.githubusercontent.com/u/19315664?v=4","gravatar_id":"","url":"https://api.github.com/users/fturib","html_url":"https://github.com/fturib","followers_url":"https://api.github.com/users/fturib/followers","following_url":"https://api.github.com/users/fturib/following{/other_user}","gists_url":"https://api.github.com/users/fturib/gists{/gist_id}","starred_url":"https://api.github.com/users/fturib/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fturib/subscriptions","organizations_url":"https://api.github.com/users/fturib/orgs","repos_url":"https://api.github.com/users/fturib/repos","events_url":"https://api.github.com/users/fturib/events{/privacy}","received_events_url":"https://api.github.com/users/fturib/received_events","type":"User","site_admin":false},"repo":{"id":102144738,"node_id":"MDEwOlJlcG9zaXRvcnkxMDIxNDQ3Mzg=","name":"coredns","full_name":"fturib/coredns","private":false,"owner":{"login":"fturib","id":19315664,"node_id":"MDQ6VXNlcjE5MzE1NjY0","avatar_url":"https://avatars1.githubusercontent.com/u/19315664?v=4","gravatar_id":"","url":"https://api.github.com/users/fturib","html_url":"https://github.com/fturib","followers_url":"https://api.github.com/users/fturib/followers","following_url":"https://api.github.com/users/fturib/following{/other_user}","gists_url":"https://api.github.com/users/fturib/gists{/gist_id}","starred_url":"https://api.github.com/users/fturib/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fturib/subscriptions","organizations_url":"https://api.github.com/users/fturib/orgs","repos_url":"https://api.github.com/users/fturib/repos","events_url":"https://api.github.com/users/fturib/events{/privacy}","received_events_url":"https://api.github.com/users/fturib/received_events","type":"User","site_admin":false},"html_url":"https://github.com/fturib/coredns","description":"CoreDNS is a DNS server that chains middleware","fork":true,"url":"https://api.github.com/repos/fturib/coredns","forks_url":"https://api.github.com/repos/fturib/coredns/forks","keys_url":"https://api.github.com/repos/fturib/coredns/keys{/key_id}","collaborators_url":"https://api.github.com/repos/fturib/coredns/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/fturib/coredns/teams","hooks_url":"https://api.github.com/repos/fturib/coredns/hooks","issue_events_url":"https://api.github.com/repos/fturib/coredns/issues/events{/number}","events_url":"https://api.github.com/repos/fturib/coredns/events","assignees_url":"https://api.github.com/repos/fturib/coredns/assignees{/user}","branches_url":"https://api.github.com/repos/fturib/coredns/branches{/branch}","tags_url":"https://api.github.com/repos/fturib/coredns/tags","blobs_url":"https://api.github.com/repos/fturib/coredns/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/fturib/coredns/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/fturib/coredns/git/refs{/sha}","trees_url":"https://api.github.com/repos/fturib/coredns/git/trees{/sha}","statuses_url":"https://api.github.com/repos/fturib/coredns/statuses/{sha}","languages_url":"https://api.github.com/repos/fturib/coredns/languages","stargazers_url":"https://api.github.com/repos/fturib/coredns/stargazers","contributors_url":"https://api.github.com/repos/fturib/coredns/contributors","subscribers_url":"https://api.github.com/repos/fturib/coredns/subscribers","subscription_url":"https://api.github.com/repos/fturib/coredns/subscription","commits_url":"https://api.github.com/repos/fturib/coredns/commits{/sha}","git_commits_url":"https://api.github.com/repos/fturib/coredns/git/commits{/sha}","comments_url":"https://api.github.com/repos/fturib/coredns/comments{/number}","issue_comment_url":"https://api.github.com/repos/fturib/coredns/issues/comments{/number}","contents_url":"https://api.github.com/repos/fturib/coredns/contents/{+path}","compare_url":"https://api.github.com/repos/fturib/coredns/compare/{base}...{head}","merges_url":"https://api.github.com/repos/fturib/coredns/merges","archive_url":"https://api.github.com/repos/fturib/coredns/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/fturib/coredns/downloads","issues_url":"https://api.github.com/repos/fturib/coredns/issues{/number}","pulls_url":"https://api.github.com/repos/fturib/coredns/pulls{/number}","milestones_url":"https://api.github.com/repos/fturib/coredns/milestones{/number}","notifications_url":"https://api.github.com/repos/fturib/coredns/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/fturib/coredns/labels{/name}","releases_url":"https://api.github.com/repos/fturib/coredns/releases{/id}","deployments_url":"https://api.github.com/repos/fturib/coredns/deployments","created_at":"2017-09-01T19:06:18Z","updated_at":"2018-10-04T23:13:29Z","pushed_at":"2018-10-04T23:53:07Z","git_url":"git://github.com/fturib/coredns.git","ssh_url":"git@github.com:fturib/coredns.git","clone_url":"https://github.com/fturib/coredns.git","svn_url":"https://github.com/fturib/coredns","homepage":"https://coredns.io","size":86983,"stargazers_count":0,"watchers_count":0,"language":"Go","has_issues":false,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"open_issues_count":0,"license":{"key":"apache-2.0","name":"Apache License 2.0","spdx_id":"Apache-2.0","url":"https://api.github.com/licenses/apache-2.0","node_id":"MDc6TGljZW5zZTI="},"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"coredns:master","ref":"master","sha":"1018a8267a05ea0a3bd968b471706604b875aeaf","user":{"login":"coredns","id":21110084,"node_id":"MDEyOk9yZ2FuaXphdGlvbjIxMTEwMDg0","avatar_url":"https://avatars3.githubusercontent.com/u/21110084?v=4","gravatar_id":"","url":"https://api.github.com/users/coredns","html_url":"https://github.com/coredns","followers_url":"https://api.github.com/users/coredns/followers","following_url":"https://api.github.com/users/coredns/following{/other_user}","gists_url":"https://api.github.com/users/coredns/gists{/gist_id}","starred_url":"https://api.github.com/users/coredns/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/coredns/subscriptions","organizations_url":"https://api.github.com/users/coredns/orgs","repos_url":"https://api.github.com/users/coredns/repos","events_url":"https://api.github.com/users/coredns/events{/privacy}","received_events_url":"https://api.github.com/users/coredns/received_events","type":"Organization","site_admin":false},"repo":{"id":54230994,"node_id":"MDEwOlJlcG9zaXRvcnk1NDIzMDk5NA==","name":"coredns","full_name":"coredns/coredns","private":false,"owner":{"login":"coredns","id":21110084,"node_id":"MDEyOk9yZ2FuaXphdGlvbjIxMTEwMDg0","avatar_url":"https://avatars3.githubusercontent.com/u/21110084?v=4","gravatar_id":"","url":"https://api.github.com/users/coredns","html_url":"https://github.com/coredns","followers_url":"https://api.github.com/users/coredns/followers","following_url":"https://api.github.com/users/coredns/following{/other_user}","gists_url":"https://api.github.com/users/coredns/gists{/gist_id}","starred_url":"https://api.github.com/users/coredns/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/coredns/subscriptions","organizations_url":"https://api.github.com/users/coredns/orgs","repos_url":"https://api.github.com/users/coredns/repos","events_url":"https://api.github.com/users/coredns/events{/privacy}","received_events_url":"https://api.github.com/users/coredns/received_events","type":"Organization","site_admin":false},"html_url":"https://github.com/coredns/coredns","description":"CoreDNS is a DNS server that chains plugins","fork":false,"url":"https://api.github.com/repos/coredns/coredns","forks_url":"https://api.github.com/repos/coredns/coredns/forks","keys_url":"https://api.github.com/repos/coredns/coredns/keys{/key_id}","collaborators_url":"https://api.github.com/repos/coredns/coredns/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/coredns/coredns/teams","hooks_url":"https://api.github.com/repos/coredns/coredns/hooks","issue_events_url":"https://api.github.com/repos/coredns/coredns/issues/events{/number}","events_url":"https://api.github.com/repos/coredns/coredns/events","assignees_url":"https://api.github.com/repos/coredns/coredns/assignees{/user}","branches_url":"https://api.github.com/repos/coredns/coredns/branches{/branch}","tags_url":"https://api.github.com/repos/coredns/coredns/tags","blobs_url":"https://api.github.com/repos/coredns/coredns/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/coredns/coredns/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/coredns/coredns/git/refs{/sha}","trees_url":"https://api.github.com/repos/coredns/coredns/git/trees{/sha}","statuses_url":"https://api.github.com/repos/coredns/coredns/statuses/{sha}","languages_url":"https://api.github.com/repos/coredns/coredns/languages","stargazers_url":"https://api.github.com/repos/coredns/coredns/stargazers","contributors_url":"https://api.github.com/repos/coredns/coredns/contributors","subscribers_url":"https://api.github.com/repos/coredns/coredns/subscribers","subscription_url":"https://api.github.com/repos/coredns/coredns/subscription","commits_url":"https://api.github.com/repos/coredns/coredns/commits{/sha}","git_commits_url":"https://api.github.com/repos/coredns/coredns/git/commits{/sha}","comments_url":"https://api.github.com/repos/coredns/coredns/comments{/number}","issue_comment_url":"https://api.github.com/repos/coredns/coredns/issues/comments{/number}","contents_url":"https://api.github.com/repos/coredns/coredns/contents/{+path}","compare_url":"https://api.github.com/repos/coredns/coredns/compare/{base}...{head}","merges_url":"https://api.github.com/repos/coredns/coredns/merges","archive_url":"https://api.github.com/repos/coredns/coredns/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/coredns/coredns/downloads","issues_url":"https://api.github.com/repos/coredns/coredns/issues{/number}","pulls_url":"https://api.github.com/repos/coredns/coredns/pulls{/number}","milestones_url":"https://api.github.com/repos/coredns/coredns/milestones{/number}","notifications_url":"https://api.github.com/repos/coredns/coredns/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/coredns/coredns/labels{/name}","releases_url":"https://api.github.com/repos/coredns/coredns/releases{/id}","deployments_url":"https://api.github.com/repos/coredns/coredns/deployments","created_at":"2016-03-18T20:56:45Z","updated_at":"2018-10-05T12:19:37Z","pushed_at":"2018-10-05T17:28:33Z","git_url":"git://github.com/coredns/coredns.git","ssh_url":"git@github.com:coredns/coredns.git","clone_url":"https://github.com/coredns/coredns.git","svn_url":"https://github.com/coredns/coredns","homepage":"https://coredns.io","size":87174,"stargazers_count":2643,"watchers_count":2643,"language":"Go","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":404,"mirror_url":null,"archived":false,"open_issues_count":95,"license":{"key":"apache-2.0","name":"Apache License 2.0","spdx_id":"Apache-2.0","url":"https://api.github.com/licenses/apache-2.0","node_id":"MDc6TGljZW5zZTI="},"forks":404,"open_issues":95,"watchers":2643,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/coredns/coredns/pulls/1861"},"html":{"href":"https://github.com/coredns/coredns/pull/1861"},"issue":{"href":"https://api.github.com/repos/coredns/coredns/issues/1861"},"comments":{"href":"https://api.github.com/repos/coredns/coredns/issues/1861/comments"},"review_comments":{"href":"https://api.github.com/repos/coredns/coredns/pulls/1861/comments"},"review_comment":{"href":"https://api.github.com/repos/coredns/coredns/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/coredns/coredns/pulls/1861/commits"},"statuses":{"href":"https://api.github.com/repos/coredns/coredns/statuses/9aefb85eb91642d816d0102e3204b2f48c173c86"}},"author_association":"MEMBER"}}
{"actor":{"display_login":"miekg"}}