From 45803609ded12069b352470a435a82696e969813 Mon Sep 17 00:00:00 2001 From: Milo Schwartz Date: Wed, 8 Jan 2025 21:36:49 -0500 Subject: [PATCH] add security policy --- SECURITY.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..909402a --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,14 @@ +# Security Policy + +If you discover a security vulnerability, please follow the steps below to responsibly disclose it to us: + +1. **Do not create a public GitHub issue or discussion post.** This could put the security of other users at risk. +2. Send a detailed report to [security@fossorial.io](mailto:security@fossorial.io) or send a **private** message to a maintainer on [Discord](https://discord.gg/HCJR8Xhme4). Include: + +- Description and location of the vulnerability. +- Potential impact of the vulnerability. +- Steps to reproduce the vulnerability. +- Potential solutions to fix the vulnerability. +- Your name/handle and a link for recognition (optional). + +We aim to address the issue as soon as possible.