amadan
web: security ledger reports to team@ for now (#782)
No dedicated security@ mailbox yet; use the existing team@elevenmessenger.com. Swap when a security@ inbox exists.
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
2 files changed,
+3
−3
docs/status.md+1 −1web/status/security.html+2 −2
diff --git a/docs/status.md b/docs/status.md| index e6ede84..f3d8da6 100644 |
| --- a/docs/status.md |
| +++ b/docs/status.md |
| @@ -43,7 +43,7 @@ public *ledger* repo is still roadmap — see `docs/planet-scale.md`). |
| (govulncheck needs the Go toolchain, which the box deliberately lacks); the |
| box republishes it as-is, and an absent `security.json` renders as "scan |
| pending" — never a fake clean. Vulnerability reports: |
| - security@elevenmessenger.com (that mailbox is part of the page's contract). |
| + team@elevenmessenger.com (swap to a dedicated security@ mailbox when one exists). |
| Pieces: generator `deploy/status-publish.sh` (box timer, mirrors |
| `deploy/fleet-backup.sh`), viewer pages `web/status/`, bucket + IAM |
diff --git a/web/status/security.html b/web/status/security.html| index aed6298..0281b21 100644 |
| --- a/web/status/security.html |
| +++ b/web/status/security.html |
| @@ -122,7 +122,7 @@ |
| what is true by design and how the hygiene looks today — never a map of open |
| problems: if a scan finds something, this page shows a <em>count</em> until |
| it’s fixed (responsible disclosure). Found a vulnerability? Tell us |
| - privately: <a href="mailto:security@elevenmessenger.com">security@elevenmessenger.com</a>.</p> |
| + privately: <a href="mailto:team@elevenmessenger.com">team@elevenmessenger.com</a>.</p> |
| <p class="asof">Dependency scan as of <time id="asof" datetime="">—</time><span id="staleness"></span></p> |
| <section aria-labelledby="h-commitment"> |
| @@ -256,7 +256,7 @@ |
| commit. The scan block is generated at build time against the exact binary |
| the fleet runs; unpatched findings publish as a count only, and full |
| details are held until fixed. Report vulnerabilities privately to |
| - <a href="mailto:security@elevenmessenger.com">security@elevenmessenger.com</a>.</p> |
| + <a href="mailto:team@elevenmessenger.com">team@elevenmessenger.com</a>.</p> |
| </footer> |
| </div> |