Fix broken IR process

cloud-gov · Nov 2, 2023 · e88b309 · e88b309
1 parent 1526cbb
commit e88b309
Show file tree

Hide file tree

Showing 3 changed files with 95 additions and 123 deletions.
diff --git a/.well-known/security.txt b/.well-known/security.txt
@@ -1,6 +1,6 @@
 # Vulnerability reporting:
 Contact: [email protected]
-Contact: https://hackerone.com/gsa_vdp
+Contact: https://hackerone.com/gsa_bbp
 Contact: [email protected]
 
 # Incident response:
@@ -9,4 +9,8 @@ Contact: [email protected]
 # Our security policy
 Policy: https://www.gsa.gov/vulnerability-disclosure-policy
 
+# Note: GSA does _offer_ bounties -- the 
+# "ineligible" notice at https://hackerone.com/gsa_vdp?type=team
+# are incorrect / outdated (2023-11-02)
+
 Expires: 2029-12-31T23:59:59
diff --git a/_docs/ops/security-ir-checklist.md b/_docs/ops/security-ir-checklist.md