Mention the fact we're a CNA in CONTRIBUTING.md

This adds a line in the do's and don'ts about requesting a CVE.
This commit is contained in:
Tod Beardsley 2021-06-04 11:30:20 -05:00 committed by GitHub
parent 257c5b5aed
commit 9ead56f1a2
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 0 deletions

View File

@ -53,6 +53,7 @@ Keeping the following in mind gives your contribution the best chance of landing
* **Do** use the many module mixin [API]s.
* **Do** include instructions on how to setup the vulnerable environment or software.
* **Do** include [Module Documentation] showing sample run-throughs.
* **Do** ask cve@rapid7.com for a CVE ID if this is describes a new vulnerability (remember to mention your PR number!)
* **Don't** include more than one module per pull request.
* **Don't** submit new [scripts]. Scripts are shipped as examples for automating local tasks, and anything "serious" can be done with post modules and local exploits.