damccorm commented on PR #40988:
URL: https://github.com/apache/beam/pull/40988#issuecomment-6638126322

   > Hi @damccorm,
   > 
   > I think you should remove `[email protected]`. In the ASF there are 
currently two kinds of PMCs:
   > 
   > * Those that use `[email protected]` as security contact (numerical 
majority). We triage their reports and forward those that _might_ be valid 
(according to your threat model and public documentation).
   > * Those that have a `security@<pmc>.apache.org` and handle report directly 
(and receive the highest number of reports). We help them with some book 
keeping.
   > 
   > If you prefer to receive the reports directly, you can open an INFRA 
ticket to create `[email protected]`: see 
https://cwiki.apache.org/confluence/spaces/SECURITY/pages/303794800/Getting+help+handling+security+reports
   
   Thanks, updated


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to