From 0248dac24a6d1f9a7d1f40663c9172bbbd832eea Mon Sep 17 00:00:00 2001 From: Andrew Murray Date: Thu, 7 Mar 2019 20:38:21 +1100 Subject: [PATCH] Use Tidelift's security process [ci skip] --- .github/CONTRIBUTING.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/CONTRIBUTING.md b/.github/CONTRIBUTING.md index eef2a30bd..e3c7379ba 100644 --- a/.github/CONTRIBUTING.md +++ b/.github/CONTRIBUTING.md @@ -34,6 +34,6 @@ The best reproductions are self-contained scripts with minimal dependencies. If ## Security vulnerabilities -To report sensitive vulnerability information, email security@python-pillow.org. +To report sensitive vulnerability information, please use the [Tidelift security contact](https://tidelift.com/security). Tidelift will coordinate the fix and disclosure. If your organisation/employer is a distributor of Pillow and would like advance notification of security-related bugs, please let us know your preferred contact method.