From 26962417d0b1f2bc373caab7b1b1599cd69aff97 Mon Sep 17 00:00:00 2001 From: Iko Date: Sun, 9 Aug 2026 21:06:18 +0700 Subject: [PATCH] fix(builder): remove non-deliverable email from SECURITY.md Greptile found that the reporting email iap@users.noreply.github.com is non-deliverable (DNS NXDOMAIN). Replaced with GitHub Security Advisories as the primary contact method, keeping the GPG key for encrypted reports via that channel. --- SECURITY.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/SECURITY.md b/SECURITY.md index 702b8f5..04b25d5 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -6,8 +6,9 @@ Security is a top priority for the Hermes builder plugin. If you believe you hav ### How to Report -- **Email**: `iap@users.noreply.github.com` (GPG: `0049 2CBB E90A F475 521F 68B9 9166 D30F 6FE7 0F56`) - **GitHub Security Advisories**: Use the "Report a vulnerability" button on the [Security tab](https://github.com/iap/builder/security/policy) + - This is the primary and monitored channel for security reports + - GitHub will mediate initial contact and coordinate disclosure ### What to Include