From d1dde5406e42dc664bd7222514bfcd595e813e48 Mon Sep 17 00:00:00 2001 From: Richard Alpe Date: Tue, 25 Feb 2025 09:58:11 +0100 Subject: [PATCH] .github: add security policy (SECURITY.md) This file is interpreted by Github. Signed-off-by: Richard Alpe --- .github/SECURITY.md | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) create mode 100644 .github/SECURITY.md diff --git a/.github/SECURITY.md b/.github/SECURITY.md new file mode 100644 index 00000000..975feca7 --- /dev/null +++ b/.github/SECURITY.md @@ -0,0 +1,26 @@ +# Security Policy + +## Reporting a Vulnerability + +If you discover a security vulnerability in Infix, please use GitHub's built-in +[Report a Vulnerability](https://github.com/kernelkit/infix/security/advisories/new) +feature for a private and secure disclosure. + +When reporting, include: + +- A clear description of the vulnerability. +- Steps to reproduce the issue. +- Potential impact of the vulnerability. + +## Supported Versions + +We provide security updates only for the main branch. + +Individual support contracts are provided by _Wires_. See +[Support](https://github.com/kernelkit/infix/blob/main/.github/SUPPORT.md) +for more information. + +## Acknowledgments + +We appreciate the efforts of the security community to help improve the security +of Infix. Thank you for your responsible disclosure.