NIFI-9619 Removed GPG key from Security Mailing List reporting

This closes #5702

Signed-off-by: David Handermann <exceptionfactory@apache.org>
This commit is contained in:
exceptionfactory 2022-01-21 16:01:10 -06:00
parent 6ef6e71d05
commit 3d05844b71
No known key found for this signature in database
GPG Key ID: 29B6A52D2AAE8DBA

View File

@ -39,10 +39,10 @@ While researching, we'd like to ask you to refrain from:
## Reporting Methods
NiFi accepts reports in multiple ways:
* Send an email to [security@nifi.apache.org](mailto:security@nifi.apache.org). This is a private list monitored by the [PMC](https://nifi.apache.org/people.html). For sensitive disclosures, the GPG key fingerprint is *1230 3BB8 1F22 E11C 8725 926A AFF2 B368 23B9 44E9*.
* NiFi has a [HackerOne](https://hackerone.com/apache_nifi) project page. HackerOne provides a triaged process for researchers and organizations to collaboratively report and resolve security vulnerabilities.
* NiFi Security Mailing List: [security@nifi.apache.org](mailto:security@nifi.apache.org)
* Members of the [Project Management Committee](https://nifi.apache.org/people.html) monitor this private mailing list and respond to disclosures
* NiFi [HackerOne](https://hackerone.com/apache_nifi) project page
* HackerOne provides a triaged process for researchers and organizations to collaboratively report and resolve security vulnerabilities
## Publishing