From 0e83738fd9dcebf2d9991fffb3f978980586031b Mon Sep 17 00:00:00 2001 From: Danny <16809145+dannyneira@users.noreply.github.com> Date: Mon, 20 Jul 2026 14:52:20 -0600 Subject: [PATCH 1/3] Revise reporting security issues section Updated the section on reporting security issues to emphasize responsible disclosure practices and provide additional reporting channels. --- .../support-and-community/community/contributing.mdx | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/src/content/docs/support-and-community/community/contributing.mdx b/src/content/docs/support-and-community/community/contributing.mdx index e25279ee4..a81e0f6fb 100644 --- a/src/content/docs/support-and-community/community/contributing.mdx +++ b/src/content/docs/support-and-community/community/contributing.mdx @@ -29,13 +29,18 @@ Other channels: For logs, crash reports, CPU samples, and AI conversation IDs, see [Sending feedback and logs](/support-and-community/troubleshooting-and-support/sending-us-feedback/). -## Reporting security issues +## Reporting security vulnerability :::danger Do not file public issues for security vulnerabilities. ::: -Email [security@warp.dev](mailto:security@warp.dev) with reproduction steps, impact, and any proof of concept. We'll acknowledge receipt and coordinate a fix and disclosure. Full guidance is in [`CONTRIBUTING.md`](https://github.com/warpdotdev/warp/blob/master/CONTRIBUTING.md#reporting-security-issues). +If you believe you've found a security vulnerability, please follow responsible disclosure practices and do not open a public GitHub issue or pull request, as this could expose the vulnerability before a fix is available. Instead, please report it through one of the following channels: + +- **Email:** [security@warp.dev](mailto:security@warp.dev) +- **GitHub Security Advisory:** [Open a private advisory](https://github.com/warpdotdev/Warp/security/advisories/new) + +We will acknowledge your report promptly and work with you to understand and resolve the issue as quickly as possible. Full guidance is in [`SECURITY.md`](https://github.com/warpdotdev/warp/blob/master/SECURITY.md#reporting-a-vulnerability). ## Code of conduct From 50c361fa8ae98c23f67c09308984f97f524bfe2b Mon Sep 17 00:00:00 2001 From: Danny <16809145+dannyneira@users.noreply.github.com> Date: Tue, 21 Jul 2026 17:18:28 -0600 Subject: [PATCH 2/3] Update src/content/docs/support-and-community/community/contributing.mdx Co-authored-by: oz-for-oss[bot] <277970191+oz-for-oss[bot]@users.noreply.github.com> --- .../docs/support-and-community/community/contributing.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/content/docs/support-and-community/community/contributing.mdx b/src/content/docs/support-and-community/community/contributing.mdx index a81e0f6fb..10407c2ab 100644 --- a/src/content/docs/support-and-community/community/contributing.mdx +++ b/src/content/docs/support-and-community/community/contributing.mdx @@ -29,7 +29,7 @@ Other channels: For logs, crash reports, CPU samples, and AI conversation IDs, see [Sending feedback and logs](/support-and-community/troubleshooting-and-support/sending-us-feedback/). -## Reporting security vulnerability +## Reporting a security vulnerability :::danger Do not file public issues for security vulnerabilities. From 7678e5c6e1ae00dd0304a3e0df546072240317cd Mon Sep 17 00:00:00 2001 From: Danny <16809145+dannyneira@users.noreply.github.com> Date: Tue, 21 Jul 2026 17:18:40 -0600 Subject: [PATCH 3/3] Update src/content/docs/support-and-community/community/contributing.mdx Co-authored-by: oz-for-oss[bot] <277970191+oz-for-oss[bot]@users.noreply.github.com> --- .../docs/support-and-community/community/contributing.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/content/docs/support-and-community/community/contributing.mdx b/src/content/docs/support-and-community/community/contributing.mdx index 10407c2ab..9263d18d5 100644 --- a/src/content/docs/support-and-community/community/contributing.mdx +++ b/src/content/docs/support-and-community/community/contributing.mdx @@ -35,7 +35,7 @@ For logs, crash reports, CPU samples, and AI conversation IDs, see [Sending feed Do not file public issues for security vulnerabilities. ::: -If you believe you've found a security vulnerability, please follow responsible disclosure practices and do not open a public GitHub issue or pull request, as this could expose the vulnerability before a fix is available. Instead, please report it through one of the following channels: +If you believe you've found a security vulnerability, follow responsible disclosure practices and do not open a public GitHub issue or pull request, as this could expose the vulnerability before a fix is available. Include reproduction steps, impact, and any proof of concept when you report it through one of the following channels: - **Email:** [security@warp.dev](mailto:security@warp.dev) - **GitHub Security Advisory:** [Open a private advisory](https://github.com/warpdotdev/Warp/security/advisories/new)