# Security RSS feed vs mailing list

**URL:** https://meta.discourse.org/t/security-rss-feed-vs-mailing-list/97054
**Category:** Community Building
**Created:** [September 12, 2018, 4:18pm UTC](https://meta.discourse.org/t/security-rss-feed-vs-mailing-list/97054 "2018-09-12T16:18:55Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![sudoman](https://avatars.discourse-cdn.com/v4/letter/s/8baadc/32.png) [@sudoman](https://meta.discourse.org/u/sudoman)
#### Post date: [September 12, 2018, 4:18pm UTC](https://meta.discourse.org/t/security-rss-feed-vs-mailing-list/97054/1 "2018-09-12T16:18:55Z")

</div>

Hello Discourse team,

I see that you have a security feed here:

[https://github.com/discourse/discourse/search?utf8=✓&q=SECURITY&type=Commits](https://github.com/discourse/discourse/search?utf8=%E2%9C%93&q=SECURITY&type=Commits)

This is very helpful for those of us who would like to stay on top of keeping our instances patched. However I noticed that there is no obvious RSS feed button so that I could keep track of these changes without checking that URL each day. Furthermore, I admit that I don’t use an RSS reader at work, so if I were to set one up, this feed would be the only one that I’d use it for at this time.

Ideally, I would love to subscribe to a mailing list that would notify me of security patches in DIscourse. I could subscribe one of our ticketing system’s email addresses to that list so we would be quickly notified of security patches right away.

What do you think about setting up a mailing list for this purpose?

Thanks, : )  
Andrew

---

<div class="post-metadata">

### Author: ![david](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/david/32/157490_2.png) [@david](https://meta.discourse.org/u/david)
#### Post date: [September 12, 2018, 4:26pm UTC](https://meta.discourse.org/t/security-rss-feed-vs-mailing-list/97054/2 "2018-09-12T16:26:34Z")

</div>

If managing your own RSS subscription isn’t an option, you could use a service like IFTTT to send emails to you. Here’s an applet that I’ve used in the past - looks like @LeoMcA created it

> **[Email me Discourse security updates from RSS feed](https://ifttt.com/applets/QtjyYbmD-email-me-discourse-security-updates-from-rss-feed)**
>
> Get an email whenever a new item in the Discourse repository feed mentions 'security.' This helps you stay aware of important security commits as soon as they appear. Ideal for developers or admins who monitor repository updates for potential...

---

<div class="post-metadata">

### Author: ![LeoMcA](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/leomca/32/87233_2.png) [@LeoMcA](https://meta.discourse.org/u/LeoMcA)
#### Post date: [September 13, 2018, 10:59am UTC](https://meta.discourse.org/t/security-rss-feed-vs-mailing-list/97054/3 "2018-09-13T10:59:34Z")

</div>

I just published the applet that we’ve actually been using:

> **[Explore Integrations - IFTTT](https://ifttt.com/explore?_cb=1780309549)**
>
> Get more from the services you love on IFTTT. Explore the latest tips and tricks, browse by category, or search by name.

Basically the same, but you can send to any email addresses and post to a slack channel for maximum pingage.

---

<div class="post-metadata">

### Author: ![sudoman](https://avatars.discourse-cdn.com/v4/letter/s/8baadc/32.png) [@sudoman](https://meta.discourse.org/u/sudoman)
#### Post date: [September 13, 2018, 8:55pm UTC](https://meta.discourse.org/t/security-rss-feed-vs-mailing-list/97054/4 "2018-09-13T20:55:46Z")

</div>

Thanks for the input. I tried setting up RSS locally, but Liferea decided to use this generic commit feed URL: [https://github.com/discourse/discourse/commits/master.atom](https://github.com/discourse/discourse/commits/master.atom). I tried adding the GET parameters from the Web page URL, but that didn’t filter the results. The feed only shows the most recent 20 items, so none of the recent security alerts were shown.

I took a look at the links you provided, however they appear to require non-free JavaScript to sign up to them, so I’ll keep my eyes open for alternatives.
