docs: Explain how to report a security issue. (#1605)

Co-authored-by: pyansys-ci-bot <[email protected]>
ansys · Dec 30, 2024 · cefdd12 · cefdd12
1 parent cc31b93
commit cefdd12
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 0 deletions.
diff --git a/SECURITY.md b/SECURITY.md
@@ -36,5 +36,15 @@ SOFTWARE.
 
 ## Reporting a Vulnerability
 
+> [!CAUTION]
+> Please do not report any security vulnerabilities through GitHub issues.
+
 If you detect a vulnerability, contact the [PyAnsys Core team](mailto:[email protected])
 mentioning the repository and the details of your finding. The team will address it as soon as possible.
+
+Please provide us with the following information:
+
+- Any specific configuration settings needed to reproduce the problem
+- Step-by-step guidance to reproduce the problem
+- The exact location of the problematic source code, including tag, branch, commit, or a direct URL
+- The potential consequences of the vulnerability, along with a description of how an attacker could take advantage of the issue
diff --git a/doc/changelog.d/1605.documentation.md b/doc/changelog.d/1605.documentation.md
@@ -0,0 +1 @@
+Explain how to report a security issue.