SECURITY.md: Clarify language of disclosure

This commit is contained in:
Jacob Weisz authored and GitHub committed 2021-08-13 15:24:56 -05:00
1 parent b239e7dd0e
commit 674791a179
1 file changed
+1 -1
+1 -1
View File
@@ -6,4 +6,4 @@ Sandstorm operates on an evergreen release model. Only the latest release is con
## Reporting a Vulnerability
Please report security vulnerabilities to security@sandstorm.io for responsible disclosure. We ask that you hold disclosure for at least 90 days from disclosure or 48 hours from patch release, whichever is shorter.
Please report security vulnerabilities to security@sandstorm.io for responsible disclosure. We ask that you withhold public disclosure for at least 90 days after reporting the vulnerability or 48 hours after the release of fixed code which corrects the issue, whichever is shorter.