From 8600bb7cf76cf6713b8f52a9caabe3954454edf9 Mon Sep 17 00:00:00 2001 From: Estrella Pan Date: Thu, 2 Jul 2026 13:49:23 +0200 Subject: [PATCH] docs(security): add working disclosure contact email GitHub private vulnerability reporting is now enabled on the repo, and the email fallback previously pointed at a non-public profile email. Point it at a concrete address so both documented disclosure channels actually work (raised by a reporter in #1041). Co-Authored-By: Claude Fable 5 Claude-Session: https://claude.ai/code/session_014w1Z6Nxy6XTRgkFXqPr9Zh --- SECURITY.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index 0c71a9c3..a787afde 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -15,7 +15,7 @@ If you discover a security vulnerability in AutoBangumi, please report it respon 1. **GitHub Private Vulnerability Reporting** (Recommended): Use [GitHub's private vulnerability reporting feature](https://github.com/EstrellaXD/Auto_Bangumi/security/advisories/new) to submit your report securely. -2. **Email**: Contact the maintainer directly at the email associated with the GitHub account [@EstrellaXD](https://github.com/EstrellaXD). +2. **Email**: Contact the maintainer directly at [estrellaxd05@gmail.com](mailto:estrellaxd05@gmail.com). **Please do NOT:** - Open a public GitHub issue for security vulnerabilities @@ -37,7 +37,7 @@ We will acknowledge receipt of your report within 48 hours and work to address t 1. **GitHub 私密漏洞报告**（推荐）：使用 [GitHub 的私密漏洞报告功能](https://github.com/EstrellaXD/Auto_Bangumi/security/advisories/new) 安全地提交您的报告。 -2. **邮件**：直接联系维护者，使用 GitHub 账户 [@EstrellaXD](https://github.com/EstrellaXD) 关联的邮箱。 +2. **邮件**：直接联系维护者，邮箱 [estrellaxd05@gmail.com](mailto:estrellaxd05@gmail.com)。 **请勿：** - 在公开的 GitHub Issue 中报告安全漏洞