doc: add guidance on order vulns are listed in

mhdawson · danielleadams · commit 2586f098ac2e · 2022-01-31T23:54:54.000-05:00
Signed-off-by: Michael Dawson <mdawson@devrus.com> PR-URL: #41429 Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Tobias Nießen <tniessen@tnie.de> Reviewed-By: Richard Lau <rlau@redhat.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Rich Trott <rtrott@gmail.com> Reviewed-By: Beth Griggs <bgriggs@redhat.com>
diff --git a/doc/guides/security-release-process.md b/doc/guides/security-release-process.md
@@ -21,6 +21,7 @@ information described.
     the date in the slug so that it will move to the top of the blog list.)
   * [ ] pre-release: _**LINK TO PR**_
   * [ ] post-release: _**LINK TO PR**_
+    * List vulnerabilities in order of descending severity
     * Ask the HackerOne reporter if they would like to be credited on the
       security release blog page:
       ```text
