change hackerone references to point to yeswehack

diff --git a/.github/actions/spell-check/expect.txt b/.github/actions/spell-check/expect.txt
index 35ff308389903b146fdda183b1780295ffcd0bef..a9008ccf60a522b6b56ff753006e58a0fb033df4 100644 (file)
--- a/.github/actions/spell-check/expect.txt
+++ b/.github/actions/spell-check/expect.txt
@@ -1,4 +1,3 @@
-
 aaaarecord
 aaldering
 abi
@@ -1559,6 +1558,7 @@ XRecord
 XXXXXX
 yahttp
 Yehuda
+yeswehack
 Yiu
 Ylitalo
 yml

diff --git a/SECURITY.md b/SECURITY.md
index 07038efceb4a69e3ed8d9be1d804b1217ea2a087..50bc7f99cdcdbe26a1c965bb779e6cc3bf7fcf08 100644 (file)
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -13,7 +13,7 @@ This license is included in this documentation.
 Yes We Hack
 -----------
 Security issues can also be reported on [our YesWeHack page](https://yeswehack.com/programs/powerdns) and might fetch a bounty.
-Do note that only the PowerDNS software (PowerDNS Authoritative Server, the PowerDNS Recursor and dnsdist) is in scope for the HackerOne program, not our websites or other infrastructure.
+Do note that only the PowerDNS software (PowerDNS Authoritative Server, the PowerDNS Recursor and dnsdist) is in scope for the YesWeHack program, not our websites or other infrastructure.
 
 Disclosure Policy
 -----------------

diff --git a/docs/common/security-policy.rst b/docs/common/security-policy.rst
index 3f457a9f4433cd5ca9fd54024d9aef1d2c72e26e..d400225b22d8f36acf6adbab7bb4e4fb7fca5914 100644 (file)
--- a/docs/common/security-policy.rst
+++ b/docs/common/security-policy.rst
@@ -12,10 +12,10 @@ This :doc:`license <../common/license>`  is included in this documentation.
 
 If you believe you have found a security vulnerability that applies to DNS implementations generally, and you want to report this responsibly to a number of implementers, you might consider also using the `Open Source DNS Vulnerability mailing list <https://www.dns-oarc.net/oarc/oss-dns-vulns/>`_, managed by `DNS-OARC <https://www.dns-oarc.net/>`_.
 
-HackerOne
+YesWeHack
 ^^^^^^^^^
-Security issues can also be reported on `our HackerOne page <https://hackerone.com/powerdns>`_ and might fetch a bounty.
-Do note that only the PowerDNS software is in scope for the HackerOne program, not our websites or other infrastructure.
+Security issues can also be reported on `our YesWeHack page <https://yeswehack.com/programs/powerdns>`_ and might fetch a bounty.
+Do note that only the PowerDNS software is in scope for the YesWeHack program, not our websites or other infrastructure.
 
 Disclosure Policy
 ^^^^^^^^^^^^^^^^^