Skip to content

Commit

Permalink
chore: update security reporting documentation and some funding docum…
Browse files Browse the repository at this point in the history
…entation (#7185)
  • Loading branch information
bradymiller committed Jan 24, 2024
1 parent 38c301a commit a870763
Show file tree
Hide file tree
Showing 4 changed files with 9 additions and 15 deletions.
4 changes: 2 additions & 2 deletions .github/ISSUE_TEMPLATE/bug_report.md
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ Steps to reproduce the behavior:
- OpenEMR version:
- Operating system:

<!-- Love openemr? Please consider supporting our collective:
👉 https://opencollective.com/openemr/donate -->
<!-- Love openemr? Please consider supporting our project:
👉 https://github.com/sponsors/openemr -->


6 changes: 3 additions & 3 deletions .github/ISSUE_TEMPLATE/feature_request.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,13 +6,13 @@ about: Suggest a feature for OpenEMR

### Describe the problem

Write a concise description of the problem
Write a concise description of the problem

### Describe the solution you'd like

Write concise description of what feature you want



<!-- Love openemr? Please consider supporting our collective:
👉 https://opencollective.com/openemr/donate -->
<!-- Love openemr? Please consider supporting our project:
👉 https://github.com/sponsors/openemr -->
6 changes: 3 additions & 3 deletions .github/ISSUE_TEMPLATE/security_report.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,9 +6,9 @@ about: Privately report a security vulnerability

<!-- please view in preview mode -->

Send an email to [email protected] . If possible, please encrypt your email via PGP with this [public key](https://keybase.io/bradymiller/pgp_keys.asc?fingerprint=8a93ddec0e320d5eb8a7994827def05b1a8a6d4f).
Send an email to [email protected] . If possible, please encrypt your email via PGP with this [public key](https://www.open-emr.org/files/openemr-security-pgp-key.asc).

Thank you for the help!

<!-- Love openemr? Please consider supporting our collective:
👉 https://opencollective.com/openemr/donate -->
<!-- Love openemr? Please consider supporting our project:
👉 https://github.com/sponsors/openemr -->
8 changes: 1 addition & 7 deletions .github/SECURITY.md
Original file line number Diff line number Diff line change
@@ -1,8 +1,2 @@
# Reporting Security Vulnerabilities
If you discover a security vulnerability in OpenEMR, there are 2 options for reporting the vulnerability to the OpenEMR security group.

## Option 1. Report via huntr
- Report via [our huntr page](https://huntr.dev/repos/openemr/openemr/). Bounty eligibility, CVE assignment, response times and past reports are all there.

## Option 2. Email [email protected]
- Send an email to [email protected] . If possible, please encrypt your email via PGP with this [public key](https://www.open-emr.org/files/openemr-security-pgp-key.asc).
If you discover a security vulnerability in OpenEMR, then report the vulnerability to the OpenEMR security group email at [email protected] . If possible, please encrypt your email via PGP with this [public key](https://www.open-emr.org/files/openemr-security-pgp-key.asc).

0 comments on commit a870763

Please sign in to comment.