From 446eb4d6f1962cf99a88d7fda54e2d84e886a6c9 Mon Sep 17 00:00:00 2001 From: Milo Schwartz Date: Wed, 8 Jan 2025 21:36:03 -0500 Subject: [PATCH] add security policy --- .gitignore | 3 ++- SECURITY.md | 14 ++++++++++++++ 2 files changed, 16 insertions(+), 1 deletion(-) create mode 100644 SECURITY.md diff --git a/.gitignore b/.gitignore index 53fabbc..e057418 100644 --- a/.gitignore +++ b/.gitignore @@ -1 +1,2 @@ -newt \ No newline at end of file +newt +.DS_Store diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..909402a --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,14 @@ +# Security Policy + +If you discover a security vulnerability, please follow the steps below to responsibly disclose it to us: + +1. **Do not create a public GitHub issue or discussion post.** This could put the security of other users at risk. +2. Send a detailed report to [security@fossorial.io](mailto:security@fossorial.io) or send a **private** message to a maintainer on [Discord](https://discord.gg/HCJR8Xhme4). Include: + +- Description and location of the vulnerability. +- Potential impact of the vulnerability. +- Steps to reproduce the vulnerability. +- Potential solutions to fix the vulnerability. +- Your name/handle and a link for recognition (optional). + +We aim to address the issue as soon as possible.