uptime-kuma/.github/ISSUE_TEMPLATE/security_issue.yml

---
name: "🛡️ Security Issue"
description: |
  Notify Louis Lam about a security concern. Please do NOT include any sensitive details in this issue.
# title: "Security Issue"
labels: [security]
assignees: [louislam]
body:
  - type: "markdown"
    attributes:
      value: |
        ## **⚠️ Report a Security Vulnerability**

        ### **IMPORTANT: DO NOT SHARE VULNERABILITY DETAILS HERE**

        If you have discovered a security vulnerability, please report it securely using the GitHub Security Advisory.

        **Note**: This issue is only for notifying the maintainers of the repository, as the GitHub Security Advisory does not automatically send notifications.

        - **Confidentiality**: The information you provide in the GitHub Security Advisory will initially remain confidential. However, once the vulnerability is addressed, the advisory will be publicly disclosed on GitHub.
        - **Access and Visibility**: Until the advisory is published, it will only be visible to the maintainers of the repository and invited collaborators.
        - **Credit**: You will be automatically credited as a contributor for identifying and reporting the vulnerability. Your contribution will be reflected in the MITRE Credit System.
        - **Important Reminder**: **Do not include any sensitive or detailed vulnerability information in this issue.** This issue is only for sharing the advisory URL to notify the maintainers of the repository, not for discussing the vulnerability itself.

        **Thank you for helping us keep Uptime Kuma secure!**

        ## **Step 1: Submit a GitHub Security Advisory**

        Right-click the link below and select `Open link in new tab` to access the page. This will keep the security issue open, allowing you to easily return and paste the Advisory URL here later.

        ➡️ [Create a New Security Advisory](https://github.com/louislam/uptime-kuma/security/advisories/new)

        ## **Step 2: Share the Advisory URL**

        Once you've created your advisory, please share the URL below. This will notify Louis Lam and enable them to take the appropriate action.

  - type: "textarea"
    id: github-advisory-url
    validations:
      required: true
    attributes:
      label: "GitHub Advisory URL for @louislam"
      placeholder: |
        Please paste the GitHub Advisory URL here. Only the URL is required.
        Example: https://github.com/louislam/uptime-kuma/security/advisories/GHSA-8h5r-7t6l-q3kz