Create SECURITY.md
This commit is contained in:
+19
@@ -0,0 +1,19 @@
|
|||||||
|
# Security Policy
|
||||||
|
|
||||||
|
## Supported Versions
|
||||||
|
|
||||||
|
Shuffle is currently still in beta, but we aim to support older version with critical severity issues, but do advise you to stay up to date with Major versions.
|
||||||
|
|
||||||
|
| Version | Supported |
|
||||||
|
| ------- | ------------------ |
|
||||||
|
| >=0.9.0 | :white_check_mark: |
|
||||||
|
| < 0.9.0 | :x: |
|
||||||
|
|
||||||
|
## Reporting a Vulnerability
|
||||||
|
|
||||||
|
Reporting a vulnerability can either be done to (frikky@shuffler.io)[mailto:frikky@shuffler.io] or [through the contact page on our website](https://shuffler.io/contact)
|
||||||
|
|
||||||
|
Security.txt: https://shuffler.io/.well_known/security.txt
|
||||||
|
|
||||||
|
When a >medium severity vulnerability is discovered, expect it to be fixed ASAP - please nag us until it is. Security is a top priority, and we expect you to keep us accountable.
|
||||||
|
In the case it makes sense, we'll further create a security advisory, and publish a new CVE for your new glorious finding.
|
||||||
Reference in New Issue
Block a user