diff --git a/daprdocs/content/en/operations/support/support-security-issues.md b/daprdocs/content/en/operations/support/support-security-issues.md index 58a700d37..b5df82492 100644 --- a/daprdocs/content/en/operations/support/support-security-issues.md +++ b/daprdocs/content/en/operations/support/support-security-issues.md @@ -32,7 +32,7 @@ reported by the tool _actually exists_ in Dapr, including the CLI, Dapr SDKs, th or any other repo under the Dapr org. We make use of these tools ourselves and try to act on the output they produce. -can be useful! We tend to find, however, that when these reports are sent to our security +We tend to find, however, that when these reports are sent to our security mailing list they almost always represent false positives, since these tools tend to check for the presence of a library without considering how the library is used in context.