Initial plan

Update security reporting instructions in SECURITY.md
Clarify reporting guidelines for security issues.
2025-11-16 12:47:40 +00:00 · 2025-11-16 20:45:49 +08:00
1 changed files with 2 additions and 1 deletions
--- a/SECURITY.md
+++ b/SECURITY.md
@ -8,7 +8,8 @@
   do not send a notification, I probably will miss it without this.
   <https://github.com/louislam/uptime-kuma/issues/new?assignees=&labels=help&template=security.md>

-Do not use the public issue tracker or discuss it in public as it will cause
+- Do not report any upstream dependency issues / scan result by any tools. It will be closed immediately without explainations. Unless you have PoC to prove that the upstream issue affected Uptime Kuma.
+- Do not use the public issue tracker or discuss it in public as it will cause
 more damage.

 ## Do you accept other 3rd-party bug bounty platforms?
Author	SHA1	Message	Date
copilot-swe-agent[bot]	44afbc934b	Initial plan	2025-11-16 12:47:40 +00:00
Louis Lam	f183b75a07	Update security reporting instructions in SECURITY.md Clarify reporting guidelines for security issues.	2025-11-16 20:45:49 +08:00