chore(security): add security.md

NodeSecure · Jan 7, 2023 · 0250968 · 0250968
1 parent c860593
commit 0250968
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,4 @@
+# Reporting Security Issues
+To report a security issue, please email `[email protected]` with a description of the issue, the steps you took to create the issue, affected versions, and, if known, mitigations for the issue.
+
+Our vulnerability management team will respond within one week to your email. If the issue is confirmed as a vulnerability, we will open a Security Advisory and acknowledge your contributions as part of it. This project follows a 90 day disclosure timeline.