From 18b4a8efa5611fe0f6c59eda51cc7c241dcce0c9 Mon Sep 17 00:00:00 2001 From: Uzair Hussain <104429187+UzairHussain193@users.noreply.github.com> Date: Tue, 30 Jan 2024 17:54:32 +0500 Subject: [PATCH 1/2] Create SECURITY.md --- SECURITY.md | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 SECURITY.md diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 0000000..034e848 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,21 @@ +# Security Policy + +## Supported Versions + +Use this section to tell people about which versions of your project are +currently being supported with security updates. + +| Version | Supported | +| ------- | ------------------ | +| 5.1.x | :white_check_mark: | +| 5.0.x | :x: | +| 4.0.x | :white_check_mark: | +| < 4.0 | :x: | + +## Reporting a Vulnerability + +Use this section to tell people how to report a vulnerability. + +Tell them where to go, how often they can expect to get an update on a +reported vulnerability, what to expect if the vulnerability is accepted or +declined, etc. From 3eae42ccd09767fd7858bf7b14237ce4dec9e288 Mon Sep 17 00:00:00 2001 From: Uzair Hussain <104429187+UzairHussain193@users.noreply.github.com> Date: Tue, 30 Jan 2024 18:17:50 +0500 Subject: [PATCH 2/2] Update SECURITY.md --- SECURITY.md | 26 +++++++++++++------------- 1 file changed, 13 insertions(+), 13 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index 034e848..c0bfc2d 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -1,21 +1,21 @@ # Security Policy +## Reporting a Vulnerability + +If you believe you have found a security vulnerability in our portfolio website, please help us by responsibly disclosing it to us. We take all security concerns seriously. + +**Please do not create public GitHub issues for security vulnerabilities.** Instead, kindly report it privately by sending an email to [uzairhussain193@gmail.com](mailto:uzairhussain193@gmail.com). + ## Supported Versions -Use this section to tell people about which versions of your project are -currently being supported with security updates. +This security policy applies to the latest version of our portfolio website. -| Version | Supported | -| ------- | ------------------ | -| 5.1.x | :white_check_mark: | -| 5.0.x | :x: | -| 4.0.x | :white_check_mark: | -| < 4.0 | :x: | +## Responsible Disclosure Guidelines -## Reporting a Vulnerability +When reporting a security vulnerability, please provide the following information: + +- Description of the vulnerability. +- Steps to reproduce the vulnerability. +- Your name and affiliation (if any). -Use this section to tell people how to report a vulnerability. -Tell them where to go, how often they can expect to get an update on a -reported vulnerability, what to expect if the vulnerability is accepted or -declined, etc.