feat(docs): add security policy (#42)

* feat(docs): add security policy * Update project.dic * Update project.dic --------- Co-authored-by: Steven Johnson <[email protected]>
input-output-hk · Oct 5, 2023 · 52af31c · 52af31c
1 parent bfc741b
commit 52af31c
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 0 deletions.
diff --git a/.config/dictionaries/project.dic b/.config/dictionaries/project.dic
@@ -5,6 +5,7 @@ jetbrains
 lcov
 localizable
 mdlint
+mitigations
 pubspec
 rustc
 stevenj

diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,19 @@
+# Security
+
+## Reporting a Vulnerability
+
+Please report (suspected) security vulnerabilities to <[email protected]>.
+You will receive a
+response from us within 48 hours.
+If the issue is confirmed, we will release a patch as soon
+as possible.
+
+Please provide a clear and concise description of the vulnerability, including:
+
+* the affected version(s),
+* steps that can be followed to exercise the vulnerability,
+* any workarounds or mitigations.
+
+If you have developed any code or utilities that can help demonstrate the suspected
+vulnerability, please mention them in your email but ***DO NOT*** attempt to include them as
+attachments as this may cause your Email to be blocked by spam filters.
-Original file line number
+Diff line change
@@ Expand Up / @@ -5,6 +5,7 @@ jetbrains @@
     lcov
     localizable
     mdlint
+    mitigations
     pubspec
     rustc
     stevenj
@@ Expand Down @@