chore: add SECURITY.md (vuestorefront#6427)

patentcounsel · Oct 8, 2021 · 3114a46 · 3114a46
1 parent 1f4b785
commit 3114a46
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,13 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+Please do not publicly disclose potential security vulnerabilities. Instead, report them to our dedicated email address [email protected]. Informing us this way will allow us to quickly determine the severity of the problem and provide a fix without putting existing projects at risk.
+
+If you would like to provide a patch, please **do not open a pull request**. Instead, create a commit on your fork of Vue Storefront and run this command:
+
+```bash
+git format-patch HEAD~1..HEAD --stdout > patch.txt
+```
+
+It will generate a file called `patch.txt`. Please email a description of the patch along with the patch itself to our dedicated email address mentioned above.