diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 000000000..258d33317 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,27 @@ +# Security Policy + +## Supported Versions + +We are supporting only the latest version of ExTester framework package. + +| Version | Supported | +| ------- | ------------------ | +| latest | :white_check_mark: | + +## Reporting a Vulnerability + +If you discover a vulnerability in the ExTester project, we encourage you to report it to us so that we can address it promptly. + +Here's how you can report a vulnerability: +1. Email the details of the vulnerability to djelinek@redhat.com. +2. Include as much information as possible about the vulnerability, including steps to reproduce if applicable. +3. Please do not disclose the vulnerability publicly until we have had a chance to investigate and respond. + +### Expectations + +- We will acknowledge receipt of your vulnerability report within 3 business days. +- We will strive to send regular updates on our investigation and planned fix. +- If the vulnerability is accepted, we will work to address it in a timely manner, based on the severity and complexity. +- If the vulnerability is declined, we will provide an explanation. + +Please note that the safety and security of our users are our top priorities, and we appreciate your cooperation and responsible disclosure.