Merge pull request #81 from klarna/scrub-email-address

Scrub email address

Author: jesperes

.github/SECURITY.md

@@ -5,23 +5,23 @@
 Klarna takes security seriously and wants to ensure that we maintain a secure environment for our customers and that we also provide secure solutions for the open source community. To help us achieve these goals, please note the following before using this software:
 
   - Review the software license to understand Klarna's obligations in terms of warranties and suitability for purpose
-  - For any questions or concerns about security, you can reach out directly to Klarna's security team at [email protected] 
+  - For any questions or concerns about security, you can reach out directly to Klarna's security team (see below for contact form).
   - We request that you work with our security team and opt for [responsible disclosure](https://corporate.walmart.com/article/responsible-disclosure-policy) using the guidelines below
   - We enforce SLAs on our security team and software engineers to remediate security bugs in a timely manner
   - All security related issues and pull requests you make should be tagged with "security" for easy identification
   - Please monitor this repository and update your environment in a timely manner as we release patches and updates
 
 ## Responsibly Disclosing Security Bugs to Klarna
 
-If you find a security bug in this repository, please work with Klarna's security team following responsible disclosure principles and these guidelines: 
+If you find a security bug in this repository, please work with Klarna's security team following responsible disclosure principles and these guidelines:
 
-  - Do not submit a normal issue or pull request in our public repository, instead report directly to security@klarna.com (If you would like to encrypt, please contact us for keys)
+  - Do not submit a normal issue or pull request in our public repository, instead report directly to Klarna's security team (If you would like to encrypt, please contact us for keys). See below for contact details.
   - We will review your submission and may follow up for additional details
   - If you have a patch, we will review it and approve it privately; once approved for release you can submit it as a pull request publicly in our repos (we give credit where credit is due)
   - We will keep you informed during our investigation, feel free to check in for a status update
-  - We will release the fix and publicly disclose the issue as soon as possible, but want  to ensure we due properly due diligence before releasing 
+  - We will release the fix and publicly disclose the issue as soon as possible, but want  to ensure we due properly due diligence before releasing
   - Please do not publicly blog or post about the security issue until after we have updated the public repo so that other downstream users have an opportunity to patch
 
-## Contact / Misc.
+## Contact
 
-If you have any questions, please reach out directly to the Klarna Security team at [email protected] 
+Use [this form](https://www.klarna.com/uk/phishing-form/) to report any security concerns or questions.

.github/workflows/build.yml

@@ -39,9 +39,9 @@ jobs:
       uses: actions/cache@v3
       with:
         path: ~/.cache/rebar3/hex/hexpm/packages
-        key: ${{ runner.os }}-hex-${{ hashFiles('rebar.lock') }}
+        key: ${{ runner.os }}-otp${{ matrix.otp-version }}-hex-${{ hashFiles('rebar.lock') }}
         restore-keys: |
-          ${{ runner.os }}-hex-
+          ${{ runner.os }}-otp${{ matrix.otp-version }}-hex-
     - name: Cache Dialyzer PLTs
       uses: actions/cache@v3
       with:
@@ -58,9 +58,10 @@ jobs:
         BITBUCKET_SERVER_URL: http://bitbucket:7990
       run: rebar3 as test eunit,ct,proper,cover,covertool generate
     - name: Store test logs
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@v4
       if: always()
       with:
+        overwrite: true
         name: logs
         path: |
           _build/test/logs
@@ -76,5 +77,6 @@ jobs:
       if: matrix.otp-version == '25'
       uses: actions/upload-artifact@v4
       with:
+        overwrite: true
         name: edoc
         path: "doc"