Skip to content

docs: update security reporting - #278

Draft
crandmck wants to merge 3 commits into
mainfrom
docs/update-security-reporting
Draft

crandmck wants to merge 3 commits into
mainfrom
docs/update-security-reporting

Conversation

@crandmck

@crandmck crandmck commented Oct 26, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Port the security-program update from contentauth/c2pa-rs#2901.

  • Direct vulnerability disclosures to Adobe's public Intigriti program.
  • Clarify that C2PA disclosures are accepted but are not currently eligible for bounty rewards.
  • Link reporting instructions to Adobe's bug bounty program page.

Preserves the existing vulnerability SLAs and specification-reporting guidance.

@crandmck
crandmck marked this pull request as draft October 26, 2026 17:11

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants