Skip to content

Commit 0b3fd2b

Browse files
Wordsmithing in SECURITY.md
1 parent b260666 commit 0b3fd2b

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

SECURITY.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -36,8 +36,8 @@ for the plugin. The default behavior of Composer checks all dependencies against
3636
the published list of known security vulnerabilities, and will cause the plugin
3737
operation to fail if any insecure dependencies exist. Pantheon has disabled this
3838
behavior for Terminus and Terminus plugins by setting `config.audit.block-insecure` to
39-
`false` in Terminus' composer.json file. This allows customers Continuous Integration
40-
workflows to keep working, even if they need to install Terminus plugins with
41-
dependencies with published security advisories.
39+
`false` in Terminus' composer.json file. Pantheon issues timely updates for Terminus to
40+
mitigate security risks. However, we’ve disabled the Composer audit to prevent unnecessary
41+
noise that might disrupt the user experience."
4242

4343
Use `terminus self:update` to update Terminus to the latest available version.

0 commit comments

Comments
 (0)