From d27726d8755a5631fbd2105f735811a95379c4ab Mon Sep 17 00:00:00 2001 From: Christian Cleberg Date: Mon, 16 Mar 2026 13:35:17 -0500 Subject: create SECURITY.md file --- SECURITY.md | 33 +++++++++++++++++++++++++++++++++ 1 file changed, 33 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..b7e2b73 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,33 @@ +# Security Policy + +## Supported Versions + +This section outlines which versions of the project are currently receiving +security updates. + +| Version | Supported | +| ------- | ------------------ | +| 1.x | :white_check_mark: | +| < 1.0 | :x: | + +## Reporting a Vulnerability + +If you discover a vulnerability, please follow the guidelines below to report +it: + +1. **Submission**: Send your vulnerability report to [security@cleberg.net]. + Please include a detailed description of the issue, steps to reproduce it, + and any relevant context. + +2. **Response Time**: We aim to acknowledge reports within **3 business days**. + You will receive updates on the status of your report throughout the process. + +3. **Acceptance Criteria**: If the vulnerability is confirmed, we will provide + you with an estimated timeline for resolution and keep you informed of any + updates until the issue is resolved. + +4. **Declined Reports**: If a reported vulnerability is deemed invalid or out of + scope, we will notify you of our decision and provide reasoning for the + decline. + +Thank you for helping us improve the security of our project! -- cgit v1.2.3