redis/go-redis
1
0
Fork 0
mirror of https://github.com/redis/go-redis.git synced 2026-10-22 19:49:00 +03:00
Code Activity

docs: point security reports at Redis VDP (#3949)

Browse Source
This commit is contained in:
Nedyalko Dyakov
2026-08-04 12:14:23 +03:00
committed by GitHub
parent c7f59a2a95
commit 1acd19a61b
2 changed files with 30 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
CONTRIBUTING.md
View File

@@ -72,7 +72,14 @@ that you are using supported versions of Docker and go.
### Security Vulnerabilities
**NOTE**: If you find a security vulnerability, do NOT open an issue.
Email [Redis Open Source (<oss@redis.com>)](mailto:oss@redis.com) instead.
If you believe you have found a security vulnerability, to ensure proper
review and assessment, we kindly ask vulnerability reports be submitted
through our
[Redis Vulnerability Disclosure Program](https://redis.io/redis-responsible-vulnerability-disclosure/).
Alternatively reach out via email to
[security@redis.com](mailto:security@redis.com). See
[SECURITY.md](SECURITY.md) for the full policy.
In order to determine whether you are dealing with a security issue, ask
yourself these two questions:
@@ -83,8 +90,8 @@ yourself these two questions:
If the answer to either of those two questions are *yes*, then you're
probably dealing with a security issue. Note that even if you answer
*no* to both questions, you may still be dealing with a security
issue, so if you're unsure, just email [us](mailto:oss@redis.com).
*no* to both questions, you may still be dealing with a security
issue, so if you're unsure, report it through the channels above.
### Everything Else

20
SECURITY.md Normal file
View File

@@ -0,0 +1,20 @@
# Security Policy
## Supported Versions
go-redis is generally backward compatible with very few exceptions, so we
recommend users to always use the latest version to experience stability,
performance and security. Security fixes are released as part of the latest
release of the v9 line; older major versions are no longer maintained.
## Reporting a Vulnerability
If you believe you have found a security vulnerability, to ensure proper
review and assessment, we kindly ask vulnerability reports be submitted
through our
[Redis Vulnerability Disclosure Program](https://redis.io/redis-responsible-vulnerability-disclosure/).
Alternatively reach out via email to
[security@redis.com](mailto:security@redis.com).
Please do **not** report security vulnerabilities through public GitHub
issues.