More places to find out how to report security issues

[dheles]

When I inquired about how to report security issues to the Dataverse project, I was directed to the Contributing document in the GitHub repo:

https://github.com/IQSS/dataverse/blob/develop/CONTRIBUTING.md

Other good places for this information might be the Contact page of dataverse.org:

https://dataverse.org/contact

or on the front page of the guides, perhaps under Other Resources / Support:

http://guides.dataverse.org/en/latest/

[pdurbin]

@dheles thanks for opening this issue. Are you interested in making a pull request for the "Other Resources / Support" text? The text as of 4.9.4 can be found at https://github.com/IQSS/dataverse/blob/v4.9.4/doc/sphinx-guides/source/index.rst#other-resources

I don't have edit access to https://dataverse.org/contact but I like your idea of mentioning security there, as you suggest. /cc @djbrooke @jggautier

You might be interested in the related discussion at #3215 even if that issue didn't get much traction and is now closed. I'd be open to a new issue along similar lines. Security is important.

[pdurbin]

@dheles thanks again for recommending that we update https://dataverse.org/contact to talk about how to report security issues. Here's how it looks now:

Do you feel like making a pull request to update that "Other Resources / Support" text?