Add security policy

This commit is contained in:
2023-09-27 03:09:58 -04:00
parent 1ecd11728b
commit c8822029fe

32
SECURITY.md Normal file
View File

@@ -0,0 +1,32 @@
# Security Policy
## Supported Versions
The table below details which versions of TechnicFlux are supported with security updates.
Currently, as it stands, we only support the latest official release and dev branches with security updates. **Older
releases are not supported.**
**Please ensure that you are running the latest available version of TechnicFlux to have the latest security updates and
bug fixes.**
| Version | Supported |
|---------|-----------|
| release | ✅ |
| dev | ✅ |
| v1.0.0 | ✅ |
| <v1.0.0 | ❌ |
## Reporting a Vulnerability
If you think that you have discovered a security vulnerability in TechnicFlux, please do not create a public issue.
Instead, contact us using one of the contact methods below.
In the case that the vulnerability is discovered to be valid, we will discuss a plan to address the issue and a CVE
will be requested as we push the update out.
| Method | Contact Information |
|--------------------|----------------------------------------------------------------------------------------------|
| Github (Preferred) | [Report a vulnerability](https://github.com/Zandercraft/TechnicFlux/security/advisories/new) |
| Email (Preferred) | security@zandercraft.ca |
| Discord | @zandercraft |