Skip to content

Commit 6b4e258

Browse files
committed
docs: minor changes
1 parent 272fa26 commit 6b4e258

File tree

1 file changed

+4
-3
lines changed

1 file changed

+4
-3
lines changed

_articles/security-best-practices-for-your-project.md

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -70,7 +70,7 @@ Just like security vulnerabilities, license issues are easier to fix when discov
7070

7171
A new contributor gets write access to the main branch and accidentally pushes changes that have not been tested. A dire security flaw is then uncovered, courtesy of the latest changes. To prevent such issues, branch protection rules ensure that changes cannot be pushed or merged into important branches without first undergoing reviews and passing specified status checks. You're safer and better off with this extra measure in place, guaranteeing top-notch quality every time.
7272

73-
## Set up an intake mechanism for vulnerability reporting
73+
## Make it easy (and safe) to report security issues
7474

7575
### It's a good practice to make it easy for your users to report bugs, but the big question is: when this bug has a security impact, how can they safely report them to you without putting a target on you for malicious hackers?
7676

@@ -143,11 +143,12 @@ Security is an ongoing process, not a one-time setup. By involving your communit
143143

144144
These few steps might seem easy or basic to you, but they go a long way to make your project more secure for its users, because they will provide protection against the most common issues.
145145

146+
Security isn’t static. Revisit your processes from time to time as your project grows, so do your responsibilities and your attack surface.
147+
146148
## Contributors
147149

148150
### Many thanks to all the maintainers who shared their experiences and tips with us for this guide!
149151

150152
This guide was written by [@nanzggits](https://github.com/nanzggits) & [@xcorail](https://github.com/xcorail) with contributions from:
151153

152-
[@JLLeitschuh](https://github.com/JLLeitschuh)
153-
[@intrigus-lgtm](https://github.com/intrigus-lgtm) + many others!
154+
[@JLLeitschuh](https://github.com/JLLeitschuh), [@intrigus-lgtm](https://github.com/intrigus-lgtm), [@UlisesGascon](https://github.com/ulisesgascon) + many others!

0 commit comments

Comments
 (0)