diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..0464ce3 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,22 @@ +# Security Policy + +## Supported Versions + +We value the security of our users and prioritize it for our project. Below are the versions of "templit" that are currently being supported with security updates: + +| Version | Supported | +| ------- | ------------------ | +| < 1.0 | :x: | + +## Reporting a Vulnerability + +We greatly appreciate the community's efforts in identifying and reporting vulnerabilities. Here's how you can report a vulnerability to us: + +1. **Contact**: Please report any security vulnerabilities by opening a new issue in our GitHub repository. +2. **Details**: Provide as much information as you can. This will help us understand the nature and scope of the vulnerability, and to act on it quickly. +3. **Expect a Confirmation**: Once you've submitted a vulnerability, we'll acknowledge your report within 7 days. +4. **Discussion**: We'll communicate with you to understand the nature of the issue and ensure we have all the necessary details. +5. **Updates**: We'll keep you informed about the progress towards resolving the issue. +6. **Disclosure**: After the vulnerability has been fixed, we appreciate your cooperation in allowing us a reasonable amount of time to release the fix to our users before public disclosure. + +Your efforts to share your findings with us in a responsible manner are highly appreciated. We will acknowledge your contribution in our release notes if you wish.