Create SECURITY.md

This commit is contained in:
Daniel Rudolf 2021-06-21 20:45:31 +02:00 committed by GitHub
parent d8470f9f5c
commit d0f32c0a2b
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

15
SECURITY.md Normal file
View file

@ -0,0 +1,15 @@
# Security Policy
## Supported Versions
Only the most recent stable version of Pico is supported.
## Reporting a Vulnerability
To mitigate the impact of possible security issues we ask you to disclose any security issues with Pico privately first ("responsible disclosure"). To do so please send an email to Pico's lead developer:
> Daniel Rudolf \<picocms.org@daniel-rudolf.de\>
You should receive an answer within 48 hours.
All messages with valid security reports will be puslished on GitHub in full text.