From b48033f38570dc689de00a9c8d4de07ab504da99 Mon Sep 17 00:00:00 2001 From: Imani Manyara Date: Mon, 28 Sep 2026 21:56:44 -0400 Subject: [PATCH] Name one reporting channel order in SECURITY.md, not two The private-reporting paragraph was added above the old email instruction, so the policy named security@simtabi.com twice and read as two competing instructions. Private reporting is the preferred channel and the address is its fallback; the rest of the section now applies to either. --- SECURITY.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index cbfcd2f..c72f2cf 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -17,8 +17,6 @@ The preferred channel is GitHub private vulnerability reporting: open a private **Do not** open a public GitHub issue for security problems. -Email disclosures to: **`security@simtabi.com`** - PGP key fingerprint: *to be published in `docs/security.md` ยง Signing*. We respond within **3 business days** to acknowledge receipt and