From 4421f470a4ca7617b5f594af7acb7389708b7ca7 Mon Sep 17 00:00:00 2001 From: Milo Schwartz Date: Wed, 8 Jan 2025 21:45:37 -0500 Subject: [PATCH] add security policy --- SECURITY.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000..8962e8ee --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,14 @@ +# Security Policy + +If you discover a security vulnerability, please follow the steps below to responsibly disclose it to us: + +1. **Do not create a public GitHub issue or discussion post.** This could put the security of other users at risk. +2. Send a detailed report to [security@fossorial.io](mailto:security@fossorial.io) or send a **private** message to a maintainer on [Discord](https://discord.gg/HCJR8Xhme4). Include: + +- Description and location of the vulnerability. +- Potential impact of the vulnerability. +- Steps to reproduce the vulnerability. +- Potential solutions to fix the vulnerability. +- Your name/handle and a link for recognition (optional). + +We aim to address the issue as soon as possible.