Add security policy

Signed-off-by: Knut Ahlers <knut@ahlers.me>
This commit is contained in:
Knut Ahlers 2023-07-05 16:49:11 +02:00
parent 313c1f20be
commit 6fdf184357
No known key found for this signature in database
GPG Key ID: D91C3E91E4CAD6F5

17
SECURITY.md Normal file
View File

@ -0,0 +1,17 @@
# Security Policy
## Supported Versions
| Version | Supported |
| ------- | ------------------ |
| `master` | :x: - This version is still unstable and should not be used. If you notice something is off with this version see below how to report a vulnerability. |
| [latest release](https://github.com/Luzifer/ots/releases/latest) | :white_check_mark: |
| older versions | :x: - All older releases than the current one might contain vulnerabilities and are no longer maintained. Please update to the latest release as quickly as you can. You can use the Github "Watch" functionality and watch for new releases to get notified. |
## Reporting a Vulnerability
To report an issue not affecting the safety of OTS instances please [open an issue on Github](https://github.com/Luzifer/ots/issues/new).
To report an issue affecting the safety of OTS instances please send me an E-Mail to `knut@ahlers.me` with details about the issue. A PGP key is available here: [`0x5D7EEBD183A1F4395D1ED038A5143194CB681B44`](https://knut.in/gpg)
As this is only a small project maintained only by me there are no bug-bounties or other compensations.