-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
* Create security.md file
- Loading branch information
Showing
2 changed files
with
41 additions
and
2 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,41 @@ | ||
# Security Policy | ||
|
||
## Supported Versions | ||
|
||
We release patches for security vulnerabilities only for the latest released version of the library. To ensure you are receiving the latest security updates, please update to the latest version of the library. | ||
|
||
| Version | Supported | | ||
| -------------- | ------------------ | | ||
| Latest release | :white_check_mark: | | ||
| Older versions | :x: | | ||
|
||
## Reporting a Vulnerability | ||
|
||
If you discover a security vulnerability, please email to security[at]skodjob.io. All security vulnerabilities will be promptly addressed. | ||
|
||
### Reporting Guidelines | ||
|
||
To help us address the issue as quickly as possible, please include the following details in your report: | ||
- A description of the vulnerability and its potential impact. | ||
- Detailed steps to reproduce the vulnerability. | ||
- Any potential mitigations or workarounds. | ||
|
||
We kindly ask you to refrain from publicly disclosing the vulnerability until we have resolved it. | ||
|
||
### Response Process | ||
|
||
Upon receiving your report, we will: | ||
1. Acknowledge the receipt of your report within 72 hours. | ||
2. Investigate and validate the reported vulnerability. | ||
3. Provide you with an estimated timeline for the fix. | ||
4. Notify you when the vulnerability is fixed. | ||
|
||
We are committed to keeping our users safe and will do our utmost to address all security vulnerabilities in a timely manner. | ||
|
||
## Security Resources | ||
|
||
- [OWASP Top Ten](https://owasp.org/www-project-top-ten/) | ||
- [CVE Details](https://www.cvedetails.com/) | ||
- [National Vulnerability Database](https://nvd.nist.gov/) | ||
|
||
Thank you for helping us keep Test Frame secure! |