Eclipse Foundation Security Training 2025 - How We Manage Vulnerability Reports

Learn the comprehensive vulnerability management process used by the Eclipse Foundation in this 26-minute security training session. Discover the step-by-step procedures for reporting security vulnerabilities, understand how the Eclipse Foundation's security team collaborates with project maintainers, and explore the tools utilized across GitHub and GitLab platforms. Examine the vulnerability reporting workflow starting with the security mailing list, delve into vulnerability report handling procedures, and understand GitHub Repository Security Advisories implementation. Explore pre-project security mailing list protocols, learn strategies for managing end-of-life versions and projects, and understand how the Eclipse Foundation Security Team provides ongoing support to projects. Participate in an interactive quiz session with live questions and access additional reading materials to deepen your understanding of enterprise-level vulnerability disclosure and coordination practices.