orbit-oss/flask
4
4
Fork 2
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

add security policy

Browse source 
copy from pallets/.github repo
github was using docs/security.rst by mistake
This commit is contained in:
David Lord 2021-02-08 18:20:48 -08:00
parent 571e638e2a
commit dbe76bb75d
No known key found for this signature in database
GPG key ID: 7A1C87E3F5BC42A8
1 changed files with 19 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

19
.github/SECURITY.md vendored Normal file
View file

@ -0,0 +1,19 @@
# Security Policy
If you believe you have identified a security issue with a Pallets
project, **do not open a public issue**. To responsibly report a
security issue, please email security@palletsprojects.com. A security
team member will contact you acknowledging the report and how to
continue.
Be sure to include as much detail as necessary in your report. As with
reporting normal issues, a minimal reproducible example will help the
maintainers address the issue faster. If you are able, you may also
include a fix for the issue generated with `git format-patch`.
The current and previous release will receive security patches, with
older versions evaluated based on usage information and severity.
After fixing an issue, we will make a security release along with an
announcement on our blog. We may obtain a CVE id as well. You may
include a name and link if you would like to be credited for the report.