From b6f554c3e2c3f1e0ba625a48bac5030aeb93e132 Mon Sep 17 00:00:00 2001 From: Brennan Ashton Date: Wed, 16 Dec 2020 20:29:00 -0800 Subject: [PATCH] Add project GitHub Security Policy page Signed-off-by: Brennan Ashton --- .github/SECURITY.md | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 .github/SECURITY.md diff --git a/.github/SECURITY.md b/.github/SECURITY.md new file mode 100644 index 000000000..3f34d85f7 --- /dev/null +++ b/.github/SECURITY.md @@ -0,0 +1,17 @@ +# Security Policy + +## Supported Versions + +| Version | Supported | +| ------- | ------------------ | +| 10.0.x | :heavy_check_mark: | +| 9.1.x | :heavy_check_mark: | +| < 9.1 | :x: | + +## Reporting a Vulnerability + +If you think you have found a possible vulnerability please reach out to the _private_ project mailing list +private@nuttx.apache.org or the Apache Security list security@apache.org. + +Please **DO NOT** create a GitHub issue or email the project dev list as they are public. +This project follows the Apache Vulnerability Handling Policy docuemnted [here](https://www.apache.org/security/committers.html#vulnerability-handling)