6cac5d603b
Bumps the golang group with 3 updates: [github.com/Microsoft/hcsshim](https://github.com/Microsoft/hcsshim), [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) and [github.com/onsi/gomega](https://github.com/onsi/gomega). Updates `github.com/Microsoft/hcsshim` from 0.11.2 to 0.11.4 - [Release notes](https://github.com/Microsoft/hcsshim/releases) - [Commits](https://github.com/Microsoft/hcsshim/compare/v0.11.2...v0.11.4) Updates `github.com/onsi/ginkgo/v2` from 2.13.0 to 2.13.1 - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/ginkgo/compare/v2.13.0...v2.13.1) Updates `github.com/onsi/gomega` from 1.29.0 to 1.30.0 - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/gomega/compare/v1.29.0...v1.30.0) --- updated-dependencies: - dependency-name: github.com/Microsoft/hcsshim dependency-type: direct:production update-type: version-update:semver-patch dependency-group: golang - dependency-name: github.com/onsi/ginkgo/v2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: golang - dependency-name: github.com/onsi/gomega dependency-type: direct:production update-type: version-update:semver-minor dependency-group: golang ... Signed-off-by: dependabot[bot] <support@github.com>
19 lines
727 B
Markdown
19 lines
727 B
Markdown
# Security Policy
|
|
|
|
If you have discovered a security vulnerability in this project, please report it
|
|
privately. **Do not disclose it as a public issue.** This gives us time to work with you
|
|
to fix the issue before public exposure, reducing the chance that the exploit will be
|
|
used before a patch is released.
|
|
|
|
You may submit the report in the following ways:
|
|
|
|
- send an email to go-logr-security@googlegroups.com
|
|
- send us a [private vulnerability report](https://github.com/go-logr/logr/security/advisories/new)
|
|
|
|
Please provide the following information in your report:
|
|
|
|
- A description of the vulnerability and its impact
|
|
- How to reproduce the issue
|
|
|
|
We ask that you give us 90 days to work on a fix before public exposure.
|