From a327b1926c97adbafe875761a82c733056df4960 Mon Sep 17 00:00:00 2001 From: Marcos Lilljedahl Date: Sat, 4 Mar 2023 00:08:51 -0300 Subject: [PATCH] Add security policy Signed-off-by: Marcos Lilljedahl --- .github/SECURITY.md | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 .github/SECURITY.md diff --git a/.github/SECURITY.md b/.github/SECURITY.md new file mode 100644 index 0000000..ef2f0e6 --- /dev/null +++ b/.github/SECURITY.md @@ -0,0 +1,16 @@ +# Security Policy + +## Reporting a Vulnerability + +If there are any vulnerabilities in this project or in [the playground](https://labs.play-with-docker.com), don't hesitate to _report them_. + +1. Write an email to marcosnils (at) gmail.com +2. Describe the vulnerability. + + If you have a fix, that is most welcome -- please attach or summarize it in your message! + +3. We will evaluate the vulnerability and, if necessary, release a fix or mitigating steps to address it. We will contact you to let you know the outcome, and will credit you in the report. + + Please **do not disclose the vulnerability publicly** until a fix is released! + +4. Once we have either a) published a fix, or b) declined to address the vulnerability for whatever reason, you are free to publicly disclose it.