diff --git a/SECURITY.md b/SECURITY.md index daa5ecc0ecb..52aa1aafaad 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -23,8 +23,9 @@ Use the [NVIDIA public PGP key](https://www.nvidia.com/en-us/security/pgp-key) t ### GitHub Private Vulnerability Reporting -You can use [GitHub's private vulnerability reporting](https://docs.github.com/en/code-security/how-tos/report-and-fix-vulnerabilities/configure-vulnerability-reporting/configuring-private-vulnerability-reporting-for-a-repository) to submit a report directly on this repository. -Navigate to the **Security** tab and select **Report a vulnerability**. +GitHub supports [private vulnerability reporting](https://docs.github.com/en/code-security/how-tos/report-and-fix-vulnerabilities/configure-vulnerability-reporting/configuring-private-vulnerability-reporting-for-a-repository) for repositories that enable it. +This repository does not currently show **Report a vulnerability** in the **Security** tab. +Report the issue directly to NVIDIA PSIRT through the [NVIDIA Vulnerability Disclosure Program](https://www.nvidia.com/en-us/security/report-vulnerability/) or by emailing [psirt@nvidia.com](mailto:psirt@nvidia.com). ## What to Include