From 52f70ae12850e7c553e5bd22c60d0e7be11a2894 Mon Sep 17 00:00:00 2001 From: jrfnl Date: Sun, 12 Nov 2023 23:03:09 +0100 Subject: [PATCH] Defer to organisation security policy Commit https://github.com/PHPCSStandards/.github/commit/15b6006cdf302d24b7341c356e58e175a800b4a1 added a `SECURITY.md` file which is applicable for all repos in this organization and is sufficient. This means the `SECURITY.md` file in the repo can now be removed. --- .github/SECURITY.md | 22 ---------------------- 1 file changed, 22 deletions(-) delete mode 100644 .github/SECURITY.md diff --git a/.github/SECURITY.md b/.github/SECURITY.md deleted file mode 100644 index a4360b1e..00000000 --- a/.github/SECURITY.md +++ /dev/null @@ -1,22 +0,0 @@ -# Security Policy - -## Supported Versions - -The latest patch version of the `1.x` release series is supported for security updates. - -## Reporting a Vulnerability - -PHPCSExtra is a developer tool and should generally not be used in a production (web accessible) environment. - -Having said that, responsible disclosure of security issues is highly appreciated. - -**Please do not report or discuss security vulnerabilities through public GitHub issues, discussions, or pull requests.** - -Issues can be reported privately to the maintainers by opening a [Security vulnerability report](https://github.com/PHPCSStandards/PHPCSExtra/security/advisories/new). - -### Preferences - -* Please provide detailed reports with reproducible steps and a clearly defined impact. -* Include the version number of the vulnerable package in your report. -* Fixes are most welcome. - A private PR can be created from the security report to work on and discuss the patch.