Migrate Pocket's bug bounty program to Mozilla about foundation-security-advisories HOT 5 OPEN

I can do this! Is my understanding that you want getpocket.com to be listed under the Core section of eligible bug bounty websites?

from foundation-security-advisories.

That's correct. I'd also like to maintain the Pocket HoF list to whatever extent is possible.

https://help.getpocket.com/article/870-pocket-security-overview

from foundation-security-advisories.

Do you want to merge it into the Mozilla Web Hall of Fame? Or leave it as is? For easy of maintenance, I'd prefer to not to maintain a separate Pocket list going forward.

from foundation-security-advisories.

If it's easier for you we can maintain our own HoF for historical purposes. New submissions would be on Mozilla's page.

from foundation-security-advisories.

It's up to you! The actual client and web bug bounty lists are maintained in this repository:

https://github.com/mozilla/foundation-security-advisories/tree/master/bug-bounty-hof

So if you're up for migrating it, I'd be happy to approve the PR. Otherwise just leaving the historical one as-is sounds like a solid plan.

from foundation-security-advisories.