Updated email address

This commit is contained in:
Steve Springett 2021-10-07 08:00:54 -05:00 committed by GitHub
parent b2c4c88976
commit 800581e439
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -2,7 +2,7 @@
The Dependency-Track team and community take security bugs seriously. We appreciate your efforts to responsibly disclose your findings, and will make every effort to acknowledge your contributions.
To report a security issue, email [security@dependencytrack.org](mailto:security@dependencytrack.org) and include the word "SECURITY" in the subject line.
To report a security issue, email [security@dependencytrack.org](mailto:security@dependencytrack.org) and [steve.springett@owasp.org](mailto:steve.springett@owasp.org) and include the word "SECURITY" in the subject line.
The Dependency-Track team will send a response indicating the next steps in handling your report. After the initial reply to your report, the security team will keep you informed of the progress towards a fix and full announcement, and may ask for additional information or guidance.