On Tue, 24 Sep 2024 16:31:00 GMT, Erik Joelsson <er...@openjdk.org> wrote:

> My personal opinion is that one should always try to avoid 
> duplicating/forking documentation, so if we are to create a security.md file 
> to populate the security tab in GitHub, then it should only contain a link to 
> the official documentation on openjdk.org. You also need to keep in mind that 
> this file would be unique for every update release repository, so any change 
> would need to be backported everywhere. That makes maintaining this kind of 
> information in the project source repository quite impractical.

Thanks for the feedback, I've updated this PR to simply include a link to the 
official policy on the website now

-------------

PR Comment: https://git.openjdk.org/jdk/pull/21155#issuecomment-2372138025

Reply via email to