Skip to content

Add vulnerability submission quality guidelines - #12807

Merged
traefiker merged 1 commit into
traefik:v3.6from
emilevauge:add-vulnerability-submission-guidelines
Mar 13, 2026
Merged

traefiker merged 1 commit into
traefik:v3.6from
emilevauge:add-vulnerability-submission-guidelines

Conversation

@emilevauge

@emilevauge emilevauge commented Mar 13, 2026 •

Copy link
Copy Markdown
Member

What does this PR do?

  • Add a "Submission Quality Guidelines" section to the security documentation
  • Require contributors to test and validate vulnerabilities with a working proof of concept before submitting
  • State that unvalidated AI/LLM-generated reports will be closed immediately
  • Warn that repeat offenders may have their accounts blocked

Motivation

Addresses the growing number of low-quality security advisories submitted without proper human validation.

Address the growing number of low-quality, AI-generated security
reports by documenting clear expectations: contributors must test
and validate vulnerabilities before submission, and unvalidated
AI/LLM-generated reports will be closed immediately. Repeat
offenders may have their accounts blocked.

@nmengin nmengin left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@nmengin nmengin added status/3-needs-merge bot/light-review decreases the number of required LGTM from 3 to 1. and removed status/2-needs-review labels Mar 13, 2026
@traefiker
traefiker merged commit 6d6374d into traefik:v3.6 Mar 13, 2026
5 checks passed
@traefiker traefiker removed status/3-needs-merge bot/light-review decreases the number of required LGTM from 3 to 1. labels Mar 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants