From a404ae263ca599c9b0911885e5c6bff7d060c5d1 Mon Sep 17 00:00:00 2001 From: Zayar Khin <4212008+zkhin@users.noreply.github.com> Date: Fri, 3 Jan 2025 15:19:25 -0500 Subject: [PATCH] Create SECURITY.md --- SECURITY.md | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..0f03208 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,20 @@ +# Security Policy + +## Supported Versions + +These versions will be enforced with security auditing for use as dependecies and recognition archival use. Manual signed verification is necessary to build or use as dependencies unless approved by downstream users each time a build of theirs is submitted or deployed. You can also appeal this process, however, certain public facing platforms will not be able to distribute this code. + +| Version | Supported | +| ------- | ------------------ | +| 5.1.x | :white_check_mark: | +| 5.0.x | :x: | +| 4.0.x | :white_check_mark: | +| < 4.0 | :x: | + +## Reporting a Vulnerability + +Use this section to tell people how to report a vulnerability. + +Tell them where to go, how often they can expect to get an update on a +reported vulnerability, what to expect if the vulnerability is accepted or +declined, etc.