From 8835221e6edbbfefccc5471639d83441a3978d10 Mon Sep 17 00:00:00 2001 From: seebees Date: Fri, 3 Apr 2020 09:38:29 -0700 Subject: [PATCH 1/3] chore: Update security issue notification This should be at the top of the contributing page, and should be linked at the top of the readme. --- CONTRIBUTING.md | 8 ++++---- README.rst | 3 +++ 2 files changed, 7 insertions(+), 4 deletions(-) diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 98e2d47eb..a256a7705 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -7,6 +7,10 @@ Please read through this document before submitting any issues or pull requests information to effectively respond to your bug report or contribution. +## Security issue notifications +If you discover a potential security issue in this project we ask that you notify AWS/Amazon Security via our [vulnerability reporting page](http://aws.amazon.com/security/vulnerability-reporting/). Please do **not** create a public github issue. + + ## Reporting Bugs/Feature Requests We welcome you to use the GitHub issue tracker to report bugs or suggest features. @@ -50,10 +54,6 @@ For more information see the [Code of Conduct FAQ](https://aws.github.io/code-of opensource-codeofconduct@amazon.com with any additional questions or comments. -## Security issue notifications -If you discover a potential security issue in this project we ask that you notify AWS/Amazon Security via our [vulnerability reporting page](http://aws.amazon.com/security/vulnerability-reporting/). Please do **not** create a public github issue. - - ## Licensing See the [LICENSE](https://github.com/aws/aws-encryption-sdk-python/blob/master/LICENSE) file for our project's licensing. We will ask you to confirm the licensing of your contribution. diff --git a/README.rst b/README.rst index 092b3b109..f66b444c2 100644 --- a/README.rst +++ b/README.rst @@ -30,6 +30,8 @@ The latest full documentation can be found at `Read the Docs`_. Find us on `GitHub`_. +`Security issue notifications`_ + *************** Getting Started *************** @@ -259,3 +261,4 @@ to your use-case in order to obtain peak performance. .. _standard means by which boto3 locates credentials: https://boto3.readthedocs.io/en/latest/guide/configuration.html .. _final message: https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/message-format.html .. _encryption context: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#encrypt_context +.. _Security issue notifications: ./CONTRIBUTING.md#security-issue-notifications \ No newline at end of file From 222014155948076021ec533901dd02e75af3257c Mon Sep 17 00:00:00 2001 From: seebees Date: Fri, 3 Apr 2020 10:26:39 -0700 Subject: [PATCH 2/3] Update README.rst Co-Authored-By: Matt Bullock --- README.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.rst b/README.rst index f66b444c2..7bc8038ea 100644 --- a/README.rst +++ b/README.rst @@ -261,4 +261,4 @@ to your use-case in order to obtain peak performance. .. _standard means by which boto3 locates credentials: https://boto3.readthedocs.io/en/latest/guide/configuration.html .. _final message: https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/message-format.html .. _encryption context: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#encrypt_context -.. _Security issue notifications: ./CONTRIBUTING.md#security-issue-notifications \ No newline at end of file +.. _Security issue notifications: ./CONTRIBUTING.md#security-issue-notifications From 20e5b96e2232a83515044eded4e20c08cec24464 Mon Sep 17 00:00:00 2001 From: Matt Bullock Date: Fri, 10 Apr 2020 11:17:02 -0700 Subject: [PATCH 3/3] docs: update CONTRIBUTING.md Co-Authored-By: June Blender --- CONTRIBUTING.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index a256a7705..26a562f41 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -8,7 +8,7 @@ information to effectively respond to your bug report or contribution. ## Security issue notifications -If you discover a potential security issue in this project we ask that you notify AWS/Amazon Security via our [vulnerability reporting page](http://aws.amazon.com/security/vulnerability-reporting/). Please do **not** create a public github issue. +If you discover a potential security issue in this project, notify AWS/Amazon Security by using our [vulnerability reporting page](http://aws.amazon.com/security/vulnerability-reporting/). Please do **not** create a public GitHub issue. ## Reporting Bugs/Feature Requests