diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..92a2fb3 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,24 @@ +# Security Policy + +## Supported Versions + +Since this is website, we only support the latest versions of the website. + +| Version | Supported | +| ------- | ------------------ | +| `latest`| :white_check_mark: | +| < 1.0 | :x: | + +## Reporting a Vulnerability + +If you spot any vulnerability, please notify mailto:brycengranville@outlook.com + +As a student in HS and GitHub's Global Campus, it is my commitment to squash any vulnerabilities asap. + +You can likely expect any vulnerability to be dealt with within a week or two, as I'm generally busy with my coursework. + +If your vulnerability is accepted, I will push out a new version that fixes the reported vulnerability, regardless if it includes dropping dependencies or possibly refactoring the code. Whatever it takes. 🌋 + +After that, it will be reported in the Security Advisories tab. + +If your vulnerability is declined, no further action will be taken.