Skip to content

Conversation

@ismisepaul
Copy link
Contributor

This PR replaces security URLs with a link to the central security policy.

@ismisepaul ismisepaul requested a review from a team as a code owner January 14, 2026 10:52
@github-actions
Copy link

🤖 GitHub comments

Just comment with:

  • run docs-build : Re-trigger the docs validation. (use unformatted text in the comment!)

@github-actions
Copy link

🔍 Preview links for changed docs

@jackshirazi
Copy link
Contributor

why is that better than the URL?

@ismisepaul
Copy link
Contributor Author

The URL is subject to change it recently went from elastic.co/community/security to elastic.co/product-security. There could be future changes like calling it PSIRT whereas https://github.com/elastic/.github/blob/main/SECURITY.md will remain constant

@jackshirazi
Copy link
Contributor

yes, and we put a forwarder in place so the old URL forwards to the new one. The UX is much better to go directly to the security page. If we change it to the github page, you give the customer a worse experience - not only do they have to do the additional onward click, but they also have the bizarre combination of "here, I've just redirected you to a github page where I'm telling you not to use github for security issues ... and additionally I'm pointing you at the real security page instead of giving you any useful info here even though I've just made you come here"

@ismisepaul
Copy link
Contributor Author

We can keep the URL to the policy instead of the github file.

@ismisepaul ismisepaul closed this Jan 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants