diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..604b6be --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,35 @@ +# Security Policy + +## Supported Versions + +| Version | Supported | +| --------- | ------------------ | +| 1.0.0 and later | :white_check_mark: | +| Versions prior to 1.0.0 | :x: | + +## Reporting a Vulnerability + +If you discover a security vulnerability in `redactcord`, please do the following: + +1. Do not open a public issue or disclose the vulnerability on GitHub or any public forum. +2. Report the vulnerability using the appropriate channels or guidelines specified by the project maintainers. +3. Provide detailed information about the vulnerability, including steps to reproduce and potential impact. +4. Our security team will acknowledge your report and work with you to address the issue. +5. Once the issue is confirmed and a fix is ready, we will work to release a security update as soon as possible. + +## Security Updates + +We are committed to providing timely security updates. When a security issue is reported and confirmed, we will take the following steps: + +- We will investigate and confirm the issue. +- We will work on a fix for the vulnerability. +- We will release a new version with the fix. +- We will notify package users about the security update and recommend updating to the latest version. + +Please keep your `redactcord` package up-to-date to benefit from security patches and improvements. + +## Responsible Disclosure + +We encourage responsible disclosure of security vulnerabilities. Our team greatly appreciates the efforts of security researchers and contributors who help us keep our package secure. We will provide credit to individuals who responsibly report security issues. + +Thank you for your help in keeping `redactcord` safe and secure.