From c6177e1f45c4a51eaadd40280e8ab43377bb1915 Mon Sep 17 00:00:00 2001 From: Bei Chu <914745487@qq.com> Date: Mon, 6 Mar 2023 23:06:48 +0800 Subject: [PATCH] chore: include security (#650) Co-authored-by: VG --- SECURITY.md | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000000..b71205cadd --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,21 @@ +# Security Policy + +Dozer takes security issues very seriously. If you have uncovered a vulnerability, please get in touch via the e-mail address security@getdozer.io. + + +⚠️ Please do not file GitHub issues or post on our public forum for security vulnerabilities. ⚠️ + + Please describe the issue and preferably a way to reproduce it. If you can share the following details, it will help us triage the issue more quickly. + - Type of issue + - Affected versions and impact + - Source file path + - Steps to reproduce + - Exploit code + +Note that this security address should be used only for undisclosed vulnerabilities. + +## Supported Versions + +Currently security updates will only be merged to latest release. + +We will confirm if the issue exists within two days, and if it is accepted and fixed, the update will be included in the next release, which usually happens every Friday.