Create SECURITY.md for Security Reporting (#186)

* Create SECURITY.md * bump version
wealthsimple · Jul 17, 2023 · c1c30c5 · c1c30c5
1 parent 5d3b305
commit c1c30c5
Show file tree

Hide file tree

Showing 4 changed files with 21 additions and 2 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -6,6 +6,10 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 
 ## [Unreleased]
 
+## 7.1.3 - 2023-07-14
+### Changed
+- Added SECURITY.md file
+
 ## 7.1.2 - 2023-07-13
 ### Changed
 - Fix missing cop error with standard 1.3.0

diff --git a/Gemfile.lock b/Gemfile.lock
@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    ws-style (7.1.2)
+    ws-style (7.1.3)
       rubocop-rspec (>= 2.2.0)
       rubocop-vendor (>= 0.11)
       standard (>= 1.30.1)

diff --git a/SECURITY.md b/SECURITY.md
@@ -0,0 +1,15 @@
+# Security Policy
+
+Wealthsimple secures our code base using a combination of code review, dependency review, and periodic security reviews. Static analysis is performed during automated verification additionally safeguards against common coding errors which may result in vulnerabilities.
+
+### Reporting a Vulnerability
+
+For general defects about this project, please file a [Bug Report](https://github.com/wealthsimple/ws-style/issues/new/choose)
+
+To report a vulnerability about this project please [Report a security vulnerability](https://github.com/wealthsimple/ws-style/security/advisories/new)
+
+If you have a vulnerability to report about the Wealthsimple platform, please use our white hat bug bounty program at [Hackerone](https://hackerone.com/wealthsimple)
+
+### General Support
+
+For additional support, please open a [Github Discussion](https://github.com/wealthsimple/ws-style/discussions). 
diff --git a/lib/ws/style/version.rb b/lib/ws/style/version.rb
@@ -1,5 +1,5 @@
 module Ws
   module Style
-    VERSION = '7.1.2'.freeze
+    VERSION = '7.1.3'.freeze
   end
 end