Skip to content

Commit 0255a0e

Browse files
PSRT: Add link to policy to 'Submit using GitHub Security Advisories' template
1 parent 9996332 commit 0255a0e

1 file changed

Lines changed: 7 additions & 3 deletions

File tree

security/psrt.rst

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -236,13 +236,13 @@ This patch can then be applied and pushed to the public GitHub repository:
236236
git apply ./ghsa-abcd-efgh-ijkl.patch
237237
git push origin branch-name
238238
239-
.. warning:: **IMPORTANT:** CPython's backport infrastructure
239+
.. important:: CPython's backport infrastructure
240240
is used for tracking backported patches. Use **one GitHub issue
241241
per CVE** to accurately track backports of vulnerability fixes.
242242
For new CVEs, even when related to a previous issue, **open a
243243
new GitHub issue** to accurately track fixed versions.
244244

245-
.. warning:: **IMPORTANT:** Don't select the green 'Merge pull request'
245+
.. important:: Don't select the green 'Merge pull request'
246246
or 'Publish advisory' buttons within GHSA. Advisories are published
247247
to the mailing list, and the 'Merge pull request' button within
248248
GHSA bypasses all continuous integration and branch protection
@@ -323,7 +323,11 @@ Submit using GitHub Security Advisories
323323

324324
Thanks for submitting this report.
325325
We use GitHub Security Advisories for triaging vulnerability reports,
326-
please submit your report here:
326+
please review our security policy before submitting:
327+
328+
https://devguide.python.org/security/policy/
329+
330+
Then submit your report here:
327331

328332
https://github.com/python/cpython/security/advisories/new
329333

0 commit comments

Comments
 (0)