Security

This section describes security practices and procedures for the Dataverse team.

Intake of Security Issues

As described under Reporting Security Issues, we encourage the community to email security@dataverse.org if they have any security concerns. These emails go into our private ticket tracker (RT).

We use a private GitHub issue tracker at https://github.com/IQSS/dataverse-security/issues for security issues.

Sending Security Notices

When drafting the security notice, it might be helpful to look at previous examples.

Gather email addresses from the .. _public installation spreadsheet: https://docs.google.com/spreadsheets/d/1bfsw7gnHlHerLXuk7YprUT68liHfcaMxs1rFciA-mEo/edit#gid=0 (this is also described under Ongoing Security of Your Installation in the Installation Guide).

Once you have the emails, include them as bcc.

«Previous Next»