https://pulumi.com logo
#general
Title
# general
w

worried-engineer-33884

08/08/2019, 11:11 PM
How are pulumi security vulnerabilities announced?
b

big-piano-35669

08/09/2019, 12:59 AM
In general, we follow a process much like AWS's: https://aws.amazon.com/security/vulnerability-reporting/. We don't have this documented yet on our website, however, and we don't yet have a specific security bulletin "channel" (or blog tag). I've opened up https://github.com/pulumi/docs/issues/1523 to track doing so. Any vulnerability would also get posted to #announcements.
w

worried-engineer-33884

08/09/2019, 1:04 AM
Ok got it. Thanks Joe.