Skip to content

Commit a7025fe

Browse files
authored
Update CONTRIBUTING.md
1 parent cc6c05f commit a7025fe

File tree

1 file changed

+13
-13
lines changed

1 file changed

+13
-13
lines changed

CONTRIBUTING.md

+13-13
Original file line numberDiff line numberDiff line change
@@ -9,14 +9,14 @@ security researchers and other cybersecurity
99
community members. Until then, others who wish to contribute should
1010
use the [CVE Request web form](https://cveform.mitre.org). If you are a sub-CNA you MUST push within your hierarchy first according to the rules within that hierarchy.
1111

12-
2. Only submit information to the MITRE cvelist repo that is intended to become public
12+
2. Only submit information to the CVE Program cvelist repo that is intended to become public
1313
immediately. There is **no support** for embargoed submissions!!
1414

1515
3. Understand that this is only a pilot - it could be changed
1616
significantly or even halted.
1717

1818
4. Submissions should be made subject to the [CVE Submissions
19-
License Terms of Use](https://cve.mitre.org/about/termsofuse.html).
19+
License Terms of Use](https://www.cve.org/Legal/TermsOfUse).
2020

2121
5. It is **strongly recommended** that submissions use [signed
2222
commits](https://help.github.com/articles/signing-commits-with-gpg/). Please note that some hierarchies require all submissions to be signed.
@@ -29,10 +29,10 @@ offers a web-based interface for creating and editing information
2929
about one CVE at a time.
3030

3131

32-
## Sending Data about CVE Records to MITRE
32+
## Sending Data about CVE Records to the CVE Program
3333

34-
0. If you haven't done so already, create an account on Github.com
35-
and fork the _cvelist_ repository from your parent CNA (e.g., if you are a Root you would fork [CVEProject/cvelist](https://github.com/CVEProject/cvelist/). You can either fork into your own account (e.g. from the command line this is the default), for example, if your account name
34+
0. If you haven't done so already, create an account on GitHub.com
35+
and fork the _cvelist_ repository (i.e., you would fork [CVEProject/cvelist](https://github.com/CVEProject/cvelist/)). You can either fork into your own account (e.g., from the command line this is the default), for example, if your account name
3636
is `$YOU`, this will result in a new repo named $YOU/cvelist.
3737
[**NB**: `$YOU` is used throughout the rest of this file; substitute
3838
your own account name in any names, commands, URLs, etc.] You can also clone in to an organization
@@ -63,9 +63,9 @@ git push
6363
We encourage you to include in that multiple, related updates whenever
6464
possible. For example, if you publish monthly advisories, you might
6565
name your branch `Nov-2017` and use that to send us assignment
66-
information for all the CVE ids you assigned in that month. If
66+
information for all the CVE IDs you assigned in that month. If
6767
instead you publish advisories only as needed, you might name your
68-
branch using the advisory id (eg, `SA-2017-11-03`) and include in
68+
branch using the advisory id (e.g., `SA-2017-11-03`) and include in
6969
that assignment information for the CVE ids you assigned for only
7070
this one advisory. If you are working on multiple branches make sure you explicitly branch against master otherwise future branches may include work from other local branches:
7171

@@ -103,15 +103,15 @@ The schema file is available in the [CVE Automation Working Group](https://githu
103103

104104
5. **Review your updates carefully** and make sure they contain
105105
**only information you intend to make public**. Once those reach
106-
Github.com, it's extremely difficult if not impossible to put it back
107-
under wraps. For example, you may be able to check that every CVE id
106+
GitHub.com, it's extremely difficult if not impossible to put it back
107+
under wraps. For example, you may be able to check that every CVE ID
108108
is mentioned in one of the references associated with it to avoid
109109
making public information about a vulnerability ahead of schedule.
110110
Also, review the details in the description. Do they agree with
111111
information in the associated references?
112112

113-
6. Commit your changes (eg, `git commit -av`) and, if necessary, push
114-
your branch from your local copy of your repo to Github.com (eg, `git
113+
6. Commit your changes (e.g., `git commit -av`) and, if necessary, push
114+
your branch from your local copy of your repo to GitHub.com (e.g., `git
115115
push origin $YOUR_BRANCH`).
116116

117117
7. Create a pull request to merge the changes in your new branch into
@@ -125,14 +125,14 @@ the form. There are several fields that you need to worry about :
125125
* `compare` is the branch in your repo where the changes are; eg, `$YOUR_BRANCH`
126126

127127
If you created your pull request using the URL above, make sure that
128-
Github reports that the branches can be merged. If not, say because
128+
GitHub reports that the branches can be merged. If not, say because
129129
you forgot to ensure your fork was synched with the upstream master,
130130
make additional commits in your branch to resolve the merge conflicts.
131131

132132
After a pull request has been submitted, several checks will be
133133
launched automatically, such as to perform schema validation and check
134134
ownership. The checks may add comments and labels to the pull request
135-
and, by default, Github should notify you via email of those
135+
and, by default, GitHub should notify you via email of those
136136
automatically. If the checks identify issues, you will need to
137137
address them before processing can continue.
138138

0 commit comments

Comments
 (0)