diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..2c05a1f --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,10 @@ +# Security Policy + +## Reporting a Vulnerability + +To report a security issue, please click on the "Report a vulnerability" button from the "Security" tab. +See detailed [instructions]([url](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability#privately-reporting-a-security-vulnerability)https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability#privately-reporting-a-security-vulnerability). + +The maintainers will respond within 3 working days of the report. +If the issue is confirmed as a vulnerability, we will open a Security Advisory. +We will fully acknowledge the reporter for responsibly disclosing the vulnerability.