From 96865175a99bd5d74828af7e05e7e2decdfbd955 Mon Sep 17 00:00:00 2001 From: Jamkris Date: Tue, 28 Apr 2026 09:11:36 +0900 Subject: [PATCH] docs: update SECURITY.md contact + supported versions - Replace stub email with maintainer contact (contact@jamkris.com) - Add GitHub Security Advisory as preferred reporting channel - Update supported version table to current 1.3.x release line --- SECURITY.md | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index cc5d668..f4aac25 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -2,11 +2,13 @@ ## Supported Versions +Only the latest minor release line receives security fixes. Older lines are not patched — +upgrade to the current `1.3.x` release. + | Version | Supported | | ------- | ------------------ | -| 1.2.x | :white_check_mark: | -| 1.1.x | :white_check_mark: | -| < 1.1 | :x: | +| 1.3.x | :white_check_mark: | +| < 1.3 | :x: | ## Reporting a Vulnerability @@ -14,7 +16,9 @@ If you discover a security vulnerability in Everything Gemini Code, please repor **Do not open a public GitHub issue for security vulnerabilities.** -Instead, email **** with: +Preferred channel: open a [GitHub private security advisory](https://github.com/Jamkris/everything-gemini-code/security/advisories/new). + +Alternatively, email **** with: - A description of the vulnerability - Steps to reproduce