GitHub's private vulnerability reporting, which lets researchers confidentially disclose flaws to open-source project maintainers, hits general availability
BleepingComputer Sergiu Gatlan
Related Coverage
- Private vulnerability reporting now generally available The GitHub Blog
- GitHub is about to get a lot better at reporting security flaws TechRadar
- GitHub announces the general availability of private vulnerability reporting BigTechWire
- GitHub Opens Private Vulnerability Reporting for Projects WinBuzzer
- GitHub now lets researchers privately report vulnerabilities to project maintainers Neowin
- GitHub Announces New Security Improvements SecurityWeek
- GitHub introduces new feature for easy reporting of vulnerabilities in code repositories TechCircle
- You can now privately report vulnerabilities on GitHub OnMSFT.com
- Incredibly proud of my team at GitHub and the work that went into shipping this feature. Private Vulnerability Disclosure helps both security researchers … Chris Bloom
- 'Once I found out that it was possible to submit through GitHub's private vulnerability reporting feature, I contacted several maintainers and asked them to enable it so I could report the issue without relying on back-and-forth emails. … @ravirockks@infosec.exchange
Discussion
-
@ghsecuritylab
@ghsecuritylab
on x
Connect with maintainers, report security issues, get credit. https://twitter.com/...
-
@jlleitschuh
Jonathan Leitschuh
on x
At the @theopenssf we intend to use private vulnerability reporting to automatically fix security vulnerabilities at scale across OSS! We will to use the PVR to automatically generating private security fix pull requests using @OpenRewrite and @moderneinc! https://twitter.com/...
-
@kate_catlin
Kate Catlin
on x
Today we are re-announcing private vulnerability reporting as generally available! Read more about all the new features we've added for y'all below. Cheers to making the open-source world a safer place :) https://twitter.com/...
-
@greybaker
Grey Baker
on x
If you maintain an open source project and don't have private vulnerability reporting enabled on it, now's a good time to look at it again. Props to @Kate_Catlin and the team for all the improvements, and for taking it from “good idea” to “used by more than 30,000 orgs”. 🚀 https:…
-
@github
@github
on x
“Quick and painless” and “a massive step forward.” See why maintainers are enabling private vulnerability reporting on their open source repos. https://github.blog/...