From 1482b94709ef89c50fd0571972da1c2dd7ed7ebe Mon Sep 17 00:00:00 2001 From: Ben Date: Sun, 20 Oct 2024 03:16:58 -0500 Subject: [PATCH 1/2] Create SECURITY.md Signed-off-by: Ben --- SECURITY.md | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..cc02e4c --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,16 @@ +# Security Policy + +## Supported Versions + +| Version | Supported | +| ------- | ------------------ | +| 1.1.0 | :white_check_mark: | +| < 1.1.0 | :x: | + +## Reporting a Vulnerability + +### Light Vulnerabilities +If you find a vulnerability that does not put databases, data, or security at risk, create an issue. + +### Severe Vulnerabilities +If you find a severe vulnerability that puts databases, data, or security at risk, directly message a [maintainer](https://github.com/bboonstra) ASAP. From c1b256096a8d1a2621551859c3da0fb82ae0e831 Mon Sep 17 00:00:00 2001 From: Ben Date: Sun, 20 Oct 2024 03:19:57 -0500 Subject: [PATCH 2/2] Update SECURITY.md Signed-off-by: Ben --- SECURITY.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SECURITY.md b/SECURITY.md index cc02e4c..a75a14e 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -13,4 +13,4 @@ If you find a vulnerability that does not put databases, data, or security at risk, create an issue. ### Severe Vulnerabilities -If you find a severe vulnerability that puts databases, data, or security at risk, directly message a [maintainer](https://github.com/bboonstra) ASAP. +If you find a severe vulnerability that puts databases, data, or security at risk, [report it confidentially](https://github.com/bboonstra/Effortless/security/advisories/new) or directly message a [maintainer](https://github.com/bboonstra) ASAP.