Write a security policy / nominate security contacts about docker-geoserver HOT 5 OPEN

@miceg There seems to be a couple of these security issues as indicated here https://github.com/kartoza/docker-geoserver/security/code-scanning, If it's something we can fix please send us a direct email as well. Most of these seem to come from jars

from docker-geoserver.

I don't have access to that page – but I am pretty confident it's not something a security scanner will find 😄

I'll ask to have you looped in the discussion, thanks 😄

from docker-geoserver.

@miceg ping me @[email protected] and I can share the logs

from docker-geoserver.

@Admire Nyakudya if you or another Kartoza employee is interested in volunteering on geoserver-security we would appreciate the assistance.

The value proposition is:

• Participants help out evaluating and reproducing vulnerabilities as they are reported (providing value to the project)
• Earn the insight to take care of their contracts and products in a responsible manner (providing value to their customers)

Thanks

from docker-geoserver.

Thanks @jodygarnett I can participate

from docker-geoserver.