Skip to content

Commit 2d1da11

Browse files
committed
Update form
1 parent dcba9ac commit 2d1da11

1 file changed

Lines changed: 24 additions & 18 deletions

File tree

.github/ISSUE_TEMPLATE/all-for-one.md

Lines changed: 24 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -45,37 +45,43 @@ body:
4545
placeholder: ex. CWE-502: Deserialization of Untrusted Data
4646
validations:
4747
required: false
48-
- type: textarea
49-
id: cve_ids
50-
attributes:
51-
label: CVE(s) ID list
52-
description: Enter a list of the CVE ID(s) associated with this query, one bullet for each distinct CVE. GitHub will automatically link CVE IDs to the [GitHub Advisory Database](https://github.com/advisories).
53-
placeholder: |
54-
ex.
55-
- CVE-20nn-xxxx
56-
- CVE-20nn-yyyy
57-
validations:
58-
required: true
5948
- type: textarea
6049
id: report
6150
attributes:
6251
label: Report
6352
description: Describe the vulnerability. Provide any information you think will help GitHub assess the impact your query has on the open source community.
53+
placeholder: |
54+
1. What is the vulnerability?
55+
2. How does the vulnerability work?
56+
3. What strategy do you use in your query to find the vulnerability?
57+
4. How have you reduced the number of **false positives**?
58+
5. Other information?
6459
validations:
6560
required: true
6661
- type: checkboxes
67-
id: publish
62+
id: social
63+
label: Are you planning to discuss this vulnerability submission publicly? (Blog Post, social networks, etc). *We would love to have you spread the word about the good work you are doing*
64+
validations:
65+
required: true
6866
attributes:
6967
options:
70-
- label: Are you planning to discuss this vulnerability submission publicly? (Blog Post, social networks, etc). *We would love to have you spread the word about the good work you are doing*
68+
- Yes
69+
- No
70+
- type: input
71+
id: social_url
72+
attributes:
73+
label: Blog post link
74+
description: If you have already blogged about your query, please provide a link.
75+
validations:
76+
required: false
7177
- type: textarea
72-
id: results
78+
id: cve_ids
7379
attributes:
74-
label: Result(s)
75-
description: Provide at least one useful result found by your query, on some revision of a real project. One bullet for each distinct result.
80+
label: CVE(s) ID list
81+
description: Enter a list of the CVE ID(s) associated with this query, one bullet for each distinct CVE. GitHub will automatically link CVE IDs to the [GitHub Advisory Database](https://github.com/advisories). If the result(s) is **NOT YET** fixed **nor disclosed**, and you are still waiting for a CVE, then you can privately share your result via email to [security@github.com](mailto:security@github.com?subject=[BugBounty]%20Issue%20#000%20useful%20result)
7682
placeholder: |
7783
ex.
78-
- [project1](url1)
79-
- [project2](url2)
84+
- [CVE-20nn-xxxx](<relevant URL>)
85+
- [CVE-20nn-yyyy](<relevant URL>)
8086
validations:
8187
required: true

0 commit comments

Comments
 (0)