From 13f8e5dfbe674ad534754fd2bf6528fdc12b15f6 Mon Sep 17 00:00:00 2001 From: Team 1280 Programming Laptop <59985235+Team1280Programming@users.noreply.github.com> Date: Sat, 2 Mar 2024 11:39:43 -0800 Subject: [PATCH] docs(security): create security policy --- SECURITY.md | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..95cc3a1 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,18 @@ +# Security Policy + +## Supported Versions + +As this is a web application, only the latest deployed version will be monitored and updated for security vulnerabilities. + +| Version | Supported | +| -------- | ------------------ | +| Latest | :white_check_mark: | +| Previous | :x: | + +## Reporting a Vulnerability + +In the interest of open disclosure, you are welcome to write a research paper on any vulnerabilities you discover. +In fact, we encourage you to exploit them if possible to demonstrate their potential impact. +We are not particularly concerned with DevSecOps, so these "security vulnerabilities" are not a primary concern for us. +Once you are done hacking our entire system, politely report the vulnerability securely via GitHub's private reporting system (recommended) or file a public issue and tell the world about it. +We really don't care.