From 82d2b0667beb6544113d1adeeb85ef40e50f83dd Mon Sep 17 00:00:00 2001 From: Finnegan's Owner <44065187+pacmano1@users.noreply.github.com> Date: Fri, 16 Oct 2026 15:54:21 -0600 Subject: [PATCH] Point SECURITY.md at the Eclipse Foundation Security Team security@openintegrationengine.org is being retired now that the project is at the Eclipse Foundation, so confidential reports sent there would stop reaching anyone. They now go to the Eclipse Foundation Security Team at security@eclipse-foundation.org, whose process is at https://www.eclipse.org/security/. That page tells reporters to check the project's SECURITY.md first, so this file is the first thing they read. Co-Authored-By: Claude Opus 5.5 Signed-off-by: Finnegan's Owner <44065187+pacmano1@users.noreply.github.com> --- SECURITY.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index 8f2694b3b3..96f92cc512 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -6,6 +6,8 @@ We support the current minor version in regards to security updates. Versions ar ## Reporting a Vulnerability -If this is a critical vulnerability that you would like to contact us confidentially, email us here: +If this is a critical vulnerability that you would like to report confidentially, email the Eclipse Foundation Security Team: -security@openintegrationengine.org +security@eclipse-foundation.org + +Their vulnerability reporting process is described at https://www.eclipse.org/security/.