Skip to content

Commit

Permalink
Create security.md file (#86)
Browse files Browse the repository at this point in the history
* Create security.md file
  • Loading branch information
kornys authored May 23, 2024
1 parent 798b371 commit cd12230
Show file tree
Hide file tree
Showing 2 changed files with 41 additions and 2 deletions.
2 changes: 0 additions & 2 deletions .github/pull_request_template.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,3 @@
# Pull Request Template

## Description

_Please include a summary of the changes and the related issue. Please also include relevant motivation and context. List any dependencies that are required for this change._
Expand Down
41 changes: 41 additions & 0 deletions SECURITY.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,41 @@
# Security Policy

## Supported Versions

We release patches for security vulnerabilities only for the latest released version of the library. To ensure you are receiving the latest security updates, please update to the latest version of the library.

| Version | Supported |
| -------------- | ------------------ |
| Latest release | :white_check_mark: |
| Older versions | :x: |

## Reporting a Vulnerability

If you discover a security vulnerability, please email to security[at]skodjob.io. All security vulnerabilities will be promptly addressed.

### Reporting Guidelines

To help us address the issue as quickly as possible, please include the following details in your report:
- A description of the vulnerability and its potential impact.
- Detailed steps to reproduce the vulnerability.
- Any potential mitigations or workarounds.

We kindly ask you to refrain from publicly disclosing the vulnerability until we have resolved it.

### Response Process

Upon receiving your report, we will:
1. Acknowledge the receipt of your report within 72 hours.
2. Investigate and validate the reported vulnerability.
3. Provide you with an estimated timeline for the fix.
4. Notify you when the vulnerability is fixed.

We are committed to keeping our users safe and will do our utmost to address all security vulnerabilities in a timely manner.

## Security Resources

- [OWASP Top Ten](https://owasp.org/www-project-top-ten/)
- [CVE Details](https://www.cvedetails.com/)
- [National Vulnerability Database](https://nvd.nist.gov/)

Thank you for helping us keep Test Frame secure!

0 comments on commit cd12230

Please sign in to comment.