Skip to content

docs: Update security reporting - #366

Merged
crandmck merged 3 commits into
mainfrom
docs/update-security-reporting
Oct 29, 2026
Merged

crandmck merged 3 commits into
mainfrom
docs/update-security-reporting

Conversation

@crandmck

@crandmck crandmck commented Oct 26, 2026 •

Copy link
Copy Markdown
Collaborator

Summary

Port the security-program update from contentauth/c2pa-rs#2901.

  • Direct vulnerability disclosures to Adobe's public Intigriti program.
  • Clarify that C2PA disclosures are accepted but are not currently eligible for bounty rewards.
  • Link reporting instructions to Adobe's bug bounty program page.

Also moves the existing C2PA specification exclusion to the start of the rejected-ticket list, matching the source PR.

@crandmck crandmck changed the title docs: update security reporting docs: Update security reporting Oct 26, 2026
@crandmck
crandmck marked this pull request as draft October 26, 2026 17:10
@crandmck
crandmck marked this pull request as ready for review October 29, 2026 17:01
@crandmck
crandmck merged commit aa590ea into main Oct 29, 2026
6 of 15 checks passed
@crandmck
crandmck deleted the docs/update-security-reporting branch October 29, 2026 19:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant