romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-08-26 19:53:31 +03:00
Code Issues Projects Releases Packages Wiki Activity

SECURITY-PROCESS: bountygraph shuts down

Browse source 
This backpedals back the documents to the state before bountygraph.

Closes #3311
This commit is contained in:
Daniel Stenberg 2018-11-26 11:37:49 +01:00
parent 650281ed5b
commit 4a01a20bdb
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
2 changed files with 9 additions and 89 deletions
Download patch file Download diff file Expand all files Collapse all files

22
docs/SECURITY-PROCESS.md
View file

@ -121,19 +121,15 @@ Publishing Security Advisories
6. On security advisory release day, push the changes on the curl-www
repository's remote master branch.
Bountygraph Bug Bounty
----------------------
Hackerone Internet Bug Bounty
-----------------------------
The curl project runs a bug bounty program in association with
bountygraph.com.
The curl project does not run any bounty program on its own, but there are
outside organizations that do. First report your issue the normal way and
proceed as described in this document.
After you have reported a security issue to the curl project, it has been
deemed credible and a patch and advisory has been made public you can be
eligible for a bounty from this program.
See all details at [BountyGraph](https://bountygraph.com/programs/curl).
This bounty is relying on funds from
[sponsors](https://bountygraph.com/programs/curl#publicpledges). If you use
curl professionally, consider help funding this!
Then, if the issue is [critical](https://hackerone.com/ibb-data), you are
eligible to apply for a bounty from Hackerone for your find.
Once your reported vulnerability has been publicly disclosed by the curl
project, you can submit a [report to them](https://hackerone.com/ibb-data).