From 87c2ec02e4ae068e09fce3c50b6f6a1194211f18 Mon Sep 17 00:00:00 2001
From: Tomasz Zawadzki <tomasz.zawadzki@intel.com>
Date: Tue, 31 Mar 2020 07:01:05 -0400
Subject: [PATCH] github: provide link to CVE process submission

Since project is hosted on GitHub, it makes sense to first
attempt to file issues there. Even ones that should
be submitted as part of CVE process.

This will help guide submitters to proper channels.

Signed-off-by: Tomasz Zawadzki <tomasz.zawadzki@intel.com>
Change-Id: I1be5f8fb009ce06c71520675055801c392f3acfe
Reviewed-on: https://review.spdk.io/gerrit/c/spdk/spdk/+/1602
Tested-by: SPDK CI Jenkins <sys_sgci@intel.com>
Reviewed-by: Jim Harris <james.r.harris@intel.com>
Reviewed-by: Ben Walker <benjamin.walker@intel.com>
Reviewed-by: Karol Latecki <karol.latecki@intel.com>
Reviewed-by: Darek Stojaczyk <dariusz.stojaczyk@intel.com>
---
 .github/ISSUE_TEMPLATE/config.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml
index 801f26bf8..4225a1f0c 100644
--- a/.github/ISSUE_TEMPLATE/config.yml
+++ b/.github/ISSUE_TEMPLATE/config.yml
@@ -3,3 +3,6 @@ contact_links:
   - name: SPDK Community
     url: https://spdk.io/community/
     about: Please ask and answer questions here.
+  - name: SPDK Common Vulnerabilities and Exposures (CVE) Process
+    url: https://spdk.io/cve_threat/
+    about: Please follow CVE process to responsibly disclose security vulnerabilities.