diff --git a/SECURITY.md b/SECURITY.md index c545bb57..8f6a918d 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -6,7 +6,7 @@ Lombok only runs during compilation and is not required on your servers or in yo To report a security vulnerability, please follow the procedure described in the [Tidelift security policy](https://tidelift.com/docs/security?utm_source=lombok&utm_medium=referral&utm_campaign=github). -Alternatively, you can send us an email privately via `info@projectlombok.org`. +Alternatively, you can send us an email privately via `security@projectlombok.org`. ## Disclosure Policy diff --git a/website/templates/security.html b/website/templates/security.html index 8eb2b3f7..14840be5 100644 --- a/website/templates/security.html +++ b/website/templates/security.html @@ -10,7 +10,7 @@

Nevertheless, if you have a concern or found a vulnerability, please disclose the vulnerability privately. We would like to coordinate with you so that we can release a fix for the vulnerability together with the disclosure of the vulnerability to the public. As an open source project we are not currently able to offer a monetary reward, but we will acknowledge your contribution (and we'll owe you a refreshing beverage of your choice, of course!), and work with you to set a reasonable timeline for a fix.

- If you want to report a vulnerability, please contact the tidelift security team. Alternatively, you can contact us directly via info@projectlombok.org. + If you want to report a vulnerability, please contact the tidelift security team. Alternatively, you can contact us directly via security@projectlombok.org.