From 3205e8066a57ce9f0bc498970b18d55a2c6154f7 Mon Sep 17 00:00:00 2001 From: Frikky Date: Fri, 15 Oct 2021 01:23:05 +0200 Subject: [PATCH] Create SECURITY.md --- SECURITY.md | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 00000000..3c372911 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,19 @@ +# Security Policy + +## Supported Versions + +Shuffle is currently still in beta, but we aim to support older version with critical severity issues, but do advise you to stay up to date with Major versions. + +| Version | Supported | +| ------- | ------------------ | +| >=0.9.0 | :white_check_mark: | +| < 0.9.0 | :x: | + +## Reporting a Vulnerability + +Reporting a vulnerability can either be done to (frikky@shuffler.io)[mailto:frikky@shuffler.io] or [through the contact page on our website](https://shuffler.io/contact) + +Security.txt: https://shuffler.io/.well_known/security.txt + +When a >medium severity vulnerability is discovered, expect it to be fixed ASAP - please nag us until it is. Security is a top priority, and we expect you to keep us accountable. +In the case it makes sense, we'll further create a security advisory, and publish a new CVE for your new glorious finding.