Skip to content

docs: add SECURITY.md vulnerability disclosure policy#889

Open
Akalanka1337 wants to merge 1 commit into
objective-see:masterfrom
Akalanka1337:patch-1
Open

docs: add SECURITY.md vulnerability disclosure policy#889
Akalanka1337 wants to merge 1 commit into
objective-see:masterfrom
Akalanka1337:patch-1

Conversation

@Akalanka1337

Copy link
Copy Markdown

Summary

Adds a SECURITY.md file to provide a clear security policy for LuLu.

Changes

  • Define supported versions policy
  • Add private vulnerability reporting guidance
  • Clarify which issues should be reported as security vulnerabilities
  • Add coordinated disclosure expectations
  • Document response expectations for security reports
  • Explain how users can receive security updates

Why

GitHub recommends repositories include a security policy so security researchers know how to responsibly report vulnerabilities and users understand the project's security support expectations.

This change improves security disclosure processes without affecting application functionality.

Note: If Objective-See prefers a dedicated security email or disclosure process, the reporting section can be updated accordingly.

Updated the security policy to clarify supported versions and reporting procedures for vulnerabilities.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant