diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..8f17ce8 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,25 @@ +# Security Policy + +## Supported Versions + +Use this section to tell people about which versions of your project are +Currently being supported with security updates. + +| Version | Supported | +| ------- | ------------------ | +| 1.0.x (Stable) | :white_check_mark: | +| < 1.0.x (Stable) | :x: | +| 1.7.x (Beta) | :white_check_mark: | +| < 1.7.0 (Beta) | :x: | + +## Reporting a Vulnerability + +You found a security vuln! What do you do now? +1. Identify the vuln and where it is +2. Start the process of reporting vulnerabilities and include some details below +2a. file name +2b. line number(s) +2c. expected result +2d. actual result +3. We will notify you within 72 hours of the vuln getting reported that we are investigating the report and will get back if it is confirmed or if it is not an actual vulnerability +4. We thank you for notifying us about your report within our code and cooperation while we fix this issue!