From 1f7acf3ea7857b011afd9f38fe3fefda5aa3acdc Mon Sep 17 00:00:00 2001 From: Giovanni Martins Date: Wed, 29 Nov 2023 19:40:05 -0300 Subject: [PATCH] create security policy Signed-off-by: Giovanni Martins --- SECURITY.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000000..9e4b1ee9cd --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,12 @@ +# Security Policy + +## Reporting a Vulnerability + +If you discover a vulnerability in our system, please use the following process: + +1. **Where to Report:** Submit your report via the [GitHub private reporting feature](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing-information-about-vulnerabilities/privately-reporting-a-security-vulnerability). +2. **Updates:** Expect an initial response within 48 hours. +3. **Review Process:** We'll personally review your report and may contact you for further information. +4. **Outcome:** You will be informed whether the vulnerability has been accepted or declined. If accepted, We'll work on implementing a fix. + +Your contributions to the security of this project are greatly appreciated.