Resources
Guides
- OpenSSF Guide to implementing a coordinated vulnerability disclosure process for open source projects
- GitHub Privately reporting a security vulnerability
- GitHub Managing privately reported security vulnerabilities
- Publishing a CVE
- Hex Package Retire
- Rebar Package Retire